Which versions of Llamaindex are affected by CVE-2024-58339?

LlamaIndex (v0.12.2 and earlier) contains a denial-of-service vulnerability exploitable by unauthenticated actors via the VannaPack query engine, which could crash or significantly degrade AI and…. A patch is available.

Is there a public PoC exploit available for CVE-2024-58339?

Yes, a public proof-of-concept exploit is available for CVE-2024-58339. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2024-58339?

Within 24 hours, inventory all internal applications using LlamaIndex and identify those with VannaPack VannaQueryEngine enabled; notify affected teams that publicly available exploit code exists. Within 7 days, apply the vendor-released patch to upgrade LlamaIndex beyond version 0.12.2 across all affected instances and validate functionality in staging. Within 30 days, conduct a full audit of LlamaIndex deployments to ensure all instances are patched and implement monitoring for abnormal resource consumption on patched systems.

Llamaindex CVE-2024-58339

Q: What is the CVSS score of CVE-2024-58339?

CVE-2024-58339 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

HIGH

Allocation of Resources Without Limits or Throttling (CWE-770)

2026-01-12 disclosure@vulncheck.com

Denial Of Service Llamaindex

8.7

CVSS 4.0 · Vendor: vulncheck

Severity by source

Vendor (vulncheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (vulncheck) · only source for this CVE.

CVSS VectorVendor: vulncheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Jul 14, 2026 - 23:29 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 14, 2026 - 23:22 vuln.today

cvss_changed

CVSS changed

Jul 14, 2026 - 23:22 NVD

7.5 (HIGH) 8.7 (HIGH)

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

PoC Detected

Jan 21, 2026 - 18:30 vuln.today

Public exploit code

CVE Published

Jan 12, 2026 - 23:15 nvd

HIGH 7.5

DescriptionCVE.org

LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() logic generates SQL statements from a user-supplied prompt and executes them via vn.run_sql() without enforcing query execution limits In downstream deployments where untrusted users can supply prompts, an attacker can trigger expensive or unbounded SQL operations that exhaust CPU or memory resources, resulting in a denial-of-service condition. The vulnerable execution path occurs in llama_index/packs/vanna/base.py within custom_query().

AnalysisAI

Denial-of-service in LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 lets remote unauthenticated attackers exhaust CPU and memory through the VannaPack VannaQueryEngine. The engine's custom_query() converts a user-supplied natural-language prompt into SQL and runs it via vn.run_sql() with no execution limits, so a crafted prompt can produce an unbounded or extremely expensive query. Publicly available exploit code exists (Huntr bounty report), though EPSS is low at 0.12% (30th percentile) and it is not listed in CISA KEV.