CVE-2024-14021

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir without validation. An attacker who can provide a crafted persist directory containing a malicious pickle file can trigger arbitrary code execution when the victim loads the index from disk.

• CWE-502

• https://github.com/run-llama/llama_indexProduct
• https://huntr.com/bounties/ab4ceeb4-aa85-4d1c-aaca-4eda1b71fc12Exploit, Third Party Advisory
• https://www.llamaindex.ai/Product
• https://www.vulncheck.com/advisories/llamaindex-bgem3index-unsafe-deserializationThird Party Advisory

Published

Jan 12, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-14010Typora 1.7.4 contains a command injection vulnerability in t…9.8
• CVE-2024-14011Rejected reason: This is a duplicate.
• CVE-2024-14012Potential privilege escalation issue in Revenera InstallShie…7.3
• CVE-2024-14015The WordPress eCommerce Plugin WordPress plugin through 2.9…7.1
• CVE-2024-1402Mattermost fails to check if a custom emoji reaction exists …4.3
• CVE-2024-14020A weakness has been identified in carboneio carbone up to fb…5
• CVE-2024-14024An improper certificate validation vulnerability has been re…6.7
• CVE-2024-14025An SQL injection vulnerability has been reported to affect V…6.7
• CVE-2024-14026A command injection vulnerability has been reported to affec…7.8
• CVE-2024-14027In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-14028Use after free vulnerability in Softing smartLink HW-DP or s…6.5
• CVE-2024-14029Tornado before 6.4.1 ignores duplicate Transfer-Encoding: ch…7.5