run-llama vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-58339 LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngHigh 8.7 · Jan 12, 2026
• CVE-2024-14021 LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_iHigh 8.4 · Jan 12, 2026
• CVE-2025-7707 The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environHigh 7.8 · Oct 13, 2025
• CVE-2025-7647 The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/High 7.3 · Sep 27, 2025
• CVE-2025-5302 A denial of service vulnerability exists in the JSONReader component of the run-llama/llama_index repository, specifically in version v0.12.37.High 8.6 · Aug 25, 2025
• CVE-2025-6209 A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0.12.40, specifically within the `encode_image` function in `generic_utiHigh 7.5 · Jul 7, 2025
• CVE-2025-3225 An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specificalHigh 7.5 · Jul 7, 2025
• CVE-2025-3046 A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symboHigh 7.5 · Jul 7, 2025
• CVE-2025-3108 A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12High 7.5 · Jul 6, 2025
• CVE-2025-1793 Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities.Critical 9.8 · Jun 5, 2025
• CVE-2025-1750 An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19.Critical 9.8 · Jun 2, 2025
• CVE-2025-1753 LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability.High 7.8 · May 28, 2025
• CVE-2025-1752 A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latestHigh 7.5 · May 10, 2025
• CVE-2024-12911 A vulnerability in the `default_jsonalyzer` function of the `JSONalyzeQueryEngine` in the run-llama/llama_index repository allows for SQL injection via prompt iHigh 7.1 · Mar 20, 2025
• CVE-2024-12909 A vulnerability in the FinanceChatLlamaPack of the run-llama/llama_index repository, versions up to v0.12.3, allows for SQL injection in the `run_sql_query` funCritical 9.8 · Mar 20, 2025
• CVE-2024-12704 A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack.High 7.5 · Mar 20, 2025
• CVE-2024-11958 A SQL injection vulnerability exists in the `duckdb_retriever` component of the run-llama/llama_index repository, specifically in the latest version.Critical 9.8 · Mar 20, 2025
• CVE-2024-4181 A command injection vulnerability exists in the RunGptLLM class of the llama_index library, version 0.9.47, used by the RunGpt framework from JinaAI to connect High 8.8 · May 16, 2024
• CVE-2024-3271 A command injection vulnerability exists in the run-llama/llama_index repository, specifically within the safe_eval function.Critical 9.8 · Apr 15, 2024
• CVE-2024-3098 A vulnerability was identified in the `exec_utils` class of the `llama_index` package, specifically within the `safe_eval` function, allowing for prompt injectiCritical 9.8 · Apr 10, 2024