CVE-2024-58339 | run-llama llama_index up to 0.12.2 VannaPack VannaQueryEngine custom_query allocation of resources

January 13, 2026 Yanac

A vulnerability was found in run-llama llama_index up to 0.12.2. It has been classified as critical. This affects the function custom_query of the component VannaPack VannaQueryEngine. This manipulation causes allocation of resources.

This vulnerability appears as CVE-2024-58339. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More