CVE-2023-39662: Llamaindex Project Llamaindex

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.

Affected products

• Llamaindex Project Llamaindex: up to and including 0.7.13

Published 2023-08-15. Last modified 2026-06-17.