Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

run-llama/llama_index — Vulnerabilities & Security Advisories 24

All 24 CVE vulnerabilities found in run-llama/llama_index, with AI-generated Chinese analysis, references, and POCs.

This page aggregates reported security weaknesses for the run-llama/llama_index product. It collects vulnerabilities related to the Llama Index framework, covering issues reported across recent release cycles. Readers can track the vendor’s published security advisories, understand the specific weakness classes identified, and review the product’s vulnerability history to assess risk trends. The data focuses on known defects in the Llama Index library, helping developers and security teams monitor exposure and verify remediation status for their deployments.

Vendor: run-llama

CVE ID Title CVSS Severity Published
CVE-2025-6208 Uncontrolled Memory Consumption in run-llama/llama_index CWE-400 7.5 - 2026-02-02
CVE-2025-7707 World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index CWE-377 7.8 - 2025-10-13
CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index CWE-378 8.8 - 2025-09-27
CVE-2025-5302 Denial of Service (DOS) in JSONReader in run-llama/llama_index CWE-674 7.5 - 2025-08-25
CVE-2025-6211 MD5 Hash Collision in run-llama/llama_index CWE-440 8.2 - 2025-07-10
CVE-2025-6209 Arbitrary File Read through Path Traversal in run-llama/llama_index CWE-29 7.5 - 2025-07-07
CVE-2025-5472 Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index CWE-674 7.5 - 2025-07-07
CVE-2025-6210 Hardlink-Based Path Traversal in run-llama/llama_index CWE-22 7.5 - 2025-07-07
CVE-2025-3046 Path Traversal via Symbolic Links in run-llama/llama_index CWE-22 5.3 - 2025-07-07
CVE-2025-3044 MD5 Hash Collision in run-llama/llama_index CWE-440 6.5 - 2025-07-07
CVE-2025-3225 XML Entity Expansion vulnerability in run-llama/llama_index CWE-776 7.5 - 2025-07-07
CVE-2025-3108 Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index CWE-1112 9.8 - 2025-07-06
CVE-2025-1793 SQL Injection in run-llama/llama_index CWE-89 7.5AI High AI 2025-06-05
CVE-2025-1750 SQL Injection in run-llama/llama_index CWE-89 9.8AI Critical AI 2025-06-02
CVE-2025-1753 Command Injection in LLama-Index CLI in run-llama/llama_index CWE-78 8.8AI High AI 2025-05-28
CVE-2025-1752 Denial of Service in run-llama/llama_index CWE-674 7.5AI High AI 2025-05-10
CVE-2024-11958 SQL Injection in run-llama/llama_index CWE-89 9.8 - 2025-03-20
CVE-2024-12911 SQL Injection in run-llama/llama_index CWE-89 9.1 - 2025-03-20
CVE-2024-12909 SQL Injection to RCE in run-llama/llama_index CWE-89 9.8 - 2025-03-20
CVE-2024-12910 Denial of Service in run-llama/llama_index CWE-674 7.5 - 2025-03-20
CVE-2024-12704 Denial of Service (DoS) in run-llama/llama_index CWE-835 7.5 - 2025-03-20
CVE-2024-4181 Command Injection in run-llama/llama_index CWE-94 9.8AI Critical AI 2024-05-16
CVE-2024-3271 Command Injection in run-llama/llama_index CWE-77 9.8 - 2024-04-16
CVE-2024-3098 Prompt Injection leading to Arbitrary Code Execution in run-llama/llama_index CWE-94 9.8AI Critical AI 2024-04-10

All 24 known CVE vulnerabilities affecting run-llama/llama_index with full Chinese analysis, references, and POCs where available.