Llama Stack exposes secret in initialization log

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

PYSEC-2026-1560 llama-index-core vulnerable to Uncontrolled Resource Consumption

The SimpleDirectoryReader component in llamaindex.core version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises because the user-specified file limit numfileslimit is applied after all files in a directory are loaded into memory. Thi...

PYSEC-2026-1572 Llama Stack exposes secret in initialization log

Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...

llama-prompt-ops (>=0.0.6, <=0.0.8) potentially affected by CVE-2025-12695 via dspy (2.6.13)

dspy PYPI version 2.6.13 is affected by a known vulnerability. The following packages have a transitive dependency on dspy and may be impacted: - llama-prompt-ops =0.0.6, =0.0.8 Source cves: CVE-2025-12695 Source advisory: OSV:PYSEC-2026-1318...

agentbuddy (0.1.1.dev33), agentc-llamaindex (0.2.5a2) +129 more potentially affected by CVE-2025-7707 via llama-index (>=0.4.17, <=0.12.52)

llama-index PYPI version =0.4.17, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.1.0, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =1.3.1 and more Source cves: CVE-2025-7707 Source advisory: OSV:PYSEC-2026-1556...

PYSEC-2026-1556 llama-index has Insecure Temporary File

The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...

llama-index has Insecure Temporary File

The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...

PYSEC-2026-1573 LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities

Summary A Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or...

PYSEC-2026-1571 Llama Stack could potentially allow for remote code execution

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolveastbytype function which could potentially allow for remote code execution...

PYSEC-2026-1562 llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

Llama Stack could potentially allow for remote code execution

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolveastbytype function which could potentially allow for remote code execution...

lightspeed-stack (>=0.1.1, <=0.2.0), lightspeed-stack-providers (>=0.1.10, <=0.1.15) +3 more potentially affected by CVE-2025-55178 via llama-stack (>=0.2.9, <=0.2.18)

llama-stack PYPI version =0.2.9, =0.1.1, =0.1.10, =1.0.1, =0.2.0, =0.3.0a0 Source cves: CVE-2025-55178 Source advisory: OSV:PYSEC-2026-1571...

agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: OSV:PYSEC-2026-1562...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +671 more potentially affected by CVE-2025-5302 via llama-index-core (>=0.9.56, <=0.12.37)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.5 and more Source cves: CVE-2025-5302 Source advisory: OSV:PYSEC-2026-1561...

LlamaIndex affected by a Denial of Service (DOS) in JSONReader

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

PYSEC-2026-1558 LlamaIndex vulnerable to Path Traversal attack through its encode_image function

A path traversal vulnerability exists in run-llama/llamaindex versions 0.11.23 through 0.12.40, specifically within the encodeimage function in genericutils.py. This vulnerability allows an attacker to manipulate the imagepath input to read arbitrary files on the server, including sensitive syste...

llama-index-packs-docugami-kg-rag (>=0.1.1, <=0.2.0) potentially affected by CVE-2025-6211 via llama-index-readers-docugami (0.1.4)

llama-index-readers-docugami PYPI version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on llama-index-readers-docugami and may be impacted: - llama-index-packs-docugami-kg-rag =0.1.1, =0.2.0 Source cves: CVE-2025-6211 Source advisory:...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +603 more potentially affected by CVE-2025-6209 via llama-index-core (>=0.11.23, <=0.12.39)

llama-index-core PYPI version =0.11.23, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0rc1, =0.2.1.dev3, =0.1.169, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.1, =0.1.2, =0.1.7.dev20240924104148, =0.6.0.dev20241204051808 and more Source cves: CVE-2025-6209 Source advisory: OSV:PYSEC-2026-1558...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +671 more potentially affected by CVE-2025-5472 via llama-index-core (>=0.9.56, <=0.12.37)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.5 and more Source cves: CVE-2025-5472 Source advisory: OSV:PYSEC-2026-1559...

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...