DoS via LangChainLLM in run-llama/llama_index (v0.12.5)
Date: 2024
Affected: run-llama/llama_index 0.12.5
Attack vector: dos
Category: vulnerability-disclosure
Severity: Medium

In llama_index v0.12.5 the LangChainLLM class has no exception handling when threads terminate before _llm.predict runs, leading to an infinite loop in get_response_gen (DoS).


Mitigations:

Architectural layers (MAESTRO):