Intel

AIKIDO-2024-10178

llama-index is vulnerable to Race Condition

Race Condition Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Jul 12, 2024

50

Medium Risk

This Affects:

pythonllama-index
0.10.0 - 0.10.54
Fixed in 0.10.55
Are you affected? Scan for Free

TL;DR

Affected versions of the llama-index library are vulnerable to a race condition, where a race occurs between concurrent PPTX readers over a single temporary filename.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

llama-index is vulnerable to Race Condition in versions 0.10.0 - 0.10.54.

How to fix this

Upgrade the llama-index library to the patch version.