---
id: CVE-2024-3098
aliases:
  - GHSA-wvpx-g427-q9wc
  - PYSEC-2026-397
title: >-
  llama-index-core Prompt Injection vulnerability leading to Arbitrary Code
  Execution
summary: >-
  llama-index-core Prompt Injection vulnerability leading to Arbitrary Code
  Execution
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
vendor: llama-index-core
product: llama-index-core
ecosystem: pip
affected:
  - llama-index-core < 0.10.24
patched:
  - llama-index-core 0.10.24
published: '2024-04-10'
updated: '2026-10-27'
sourceUpdated: '2026-10-27T17:45:03.951412041Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-wvpx-g427-q9wc'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2024-3098'
  - url: >-
      https://github.com/run-llama/llama_index/commit/2c92e88838a5f481d50840240b1dd3180066c6f5
  - url: >-
      https://github.com/run-llama/llama_index/commit/5fbcb5a8b9f20f81b791c7fc8849e352613ab475
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/llama-index-core/PYSEC-2026-397.yaml
  - url: 'https://github.com/run-llama/llama_index'
  - url: 'https://huntr.com/bounties/1bce0d61-ad03-4b22-bc32-8f99f92974e7'
  - url: 'https://pypi.org/project/llama-index-core'
  - url: 'https://github.com/advisories/GHSA-wvpx-g427-q9wc'
tags:
  - osv
  - pip
  - ghsa
epss: 0.00959
epssPercentile: 0.61313
cwe:
  - CWE-94
ingestedAt: '2026-10-27T17:33:23.765Z'
---

## Overview

A vulnerability was identified in the `exec_utils` class of the `llama_index` package, specifically within the `safe_eval` function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method restrictions and execute unauthorized code. The vulnerability is a bypass of the previously addressed CVE-2023-39662, demonstrated through a proof of concept that creates a file on the system by exploiting the flaw.

## Affected packages

- `llama-index-core < 0.10.24`

## Remediation

Upgrade to a patched release:

- `llama-index-core 0.10.24`