llama_index vulnerabilities

Versions of llama_index up to 0.7.13 contain a vulnerability that allows a remote attacker to execute arbitrary code via the `exec` parameter in the PandasQueryEngine function.

The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from using a shared cache directory instead of a user-specific one.

A vulnerability in the ObsidianReader class of run-llama/llama_index version 0.12.27 allows hardlink-based path traversal. Attackers can bypass path restrictions and access sensitive system files such as /etc/passwd by exploiting hardlinks; the flaw stems from inadequate hardlink handling in the load_data() method. The issue is resolved in version 0.5.2.