CVE-2024-14021 is a deserialization of untrusted data vulnerability in the run-llama llama_index project, specifically in the BGEM3Index.load_from_disk() method located in llama_index/indices/managed/bge_m3/base.py. The method uses Python's pickle.load() to deserialize the multi_embed_store.pkl file from a user-controlled persist_dir without validating the input. This allows an attacker who can control the persist_dir contents to craft a malicious pickle file that triggers arbitrary code execution upon loading the index. The vulnerability affects all versions up to and including 0.11.6.

An attacker who can supply a malicious persist directory to the vulnerable function can achieve arbitrary code execution on the victim's system when the index is loaded from disk. This can lead to full compromise of the affected environment. The vulnerability requires local or limited access to supply the crafted directory and user interaction to load the data. The CVSS 4.0 score is 8.4, reflecting high impact with low attack complexity but requiring user interaction.

No official patch or fix is currently documented. Users should avoid loading indexes from untrusted or user-supplied persist directories. Validate or sanitize input directories before deserialization. Monitor vendor advisories for updates or official fixes. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.