LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...

PYSEC-2026-1567 LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, before version 0.5.2 specifically in version 0.12.27 of llama-index, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as...

PYSEC-2026-1570 LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting the Papers Loaders package before version 0.3.2 in llama-index v0.10.0 and above through v0.12.29. This vulnerability allows ...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +603 more potentially affected by CVE-2025-3108 via llama-index-core (>=0.11.23, <=0.12.39)

llama-index-core PYPI version =0.11.23, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0rc1, =0.2.1.dev3, =0.1.169, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.1, =0.1.2, =0.1.7.dev20240924104148, =0.6.0.dev20241204051808 and more Source cves: CVE-2025-3108 Source advisory: OSV:PYSEC-2026-1564...

LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, before version 0.5.2 specifically in version 0.12.27 of llama-index, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as...

PYSEC-2026-1569 LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...

LLaMA-Factory allows Code Injection through improper vhead_file safeguards

SummaryA critical remote code execution vulnerability was discovered during the Llama Factory training process. This vulnerability arises because the vheadfile is loaded without proper safeguards, allowing malicious attackers to execute arbitrary malicious code on the host system simply by passin...

PYSEC-2026-1576 LLaMA-Factory allows Code Injection through improper vhead_file safeguards

Summary A critical remote code execution vulnerability was discovered during the Llama Factory training process. This vulnerability arises because the vheadfile is loaded without proper safeguards, allowing malicious attackers to execute arbitrary malicious code on the host system simply by passi...

airunner (>=3.0.0, <=3.1.7), edubotics-core (>=0.1.3, <=0.1.7) +23 more potentially affected by CVE-2025-1753 via llama-index-cli (>=0.1.5, <=0.4.0)

llama-index-cli PYPI version =0.1.5, =3.0.0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.0.52, =1.0.9, =1.0.3.post1, =0.1.2, =0.1.7.dev20240924104148, =0.11.0, =0.1.4, =0.2.0 and more Source cves: CVE-2025-1753 Source advisory: OSV:PYSEC-2026-1557...

LLama-Index CLI OS command injection vulnerability

LLama-Index CLI prior to v0.4.1, corresponding to LLama-Index prior to v0.12.21, contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this...

PYSEC-2026-1557 LLama-Index CLI OS command injection vulnerability

LLama-Index CLI prior to v0.4.1, corresponding to LLama-Index prior to v0.12.21, contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the --files argument, which is directly passed into os.system. An attacker who controls the content of this...

aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.1.0rc1), kendrick-package (0.0.2) +1 more potentially affected by CVE-2025-1752 via llama-index (>=0.12.15, <=0.12.19)

llama-index PYPI version =0.12.15, =1.1.0a20250429, =0.1.0, =0.2.6 Source cves: CVE-2025-1752 Source advisory: OSV:PYSEC-2026-1554...

PYSEC-2026-1554 LlamaIndex Vulnerable to Denial of Service (DoS)

A Denial of Service DoS vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llamaindex project, affecting version latestv0.12.15. The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the maxdepth...

LlamaIndex Vulnerable to Denial of Service (DoS)

A Denial of Service DoS vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llamaindex project, affecting version latestv0.12.15. The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the maxdepth...

PYSEC-2026-1574 LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py

Description A critical vulnerability exists in the llamafybaichuan2.py script of the LLaMA-Factory project. The script performs insecure deserialization using torch.load on user-supplied .bin files from an input directory. An attacker can exploit this behavior by crafting a malicious .bin file th...

ag-llama-api (>=0.0.1, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.12) +298 more potentially affected by CVE-2024-6839 via flask-cors (3.0.10)

flask-cors PYPI version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - ag-llama-api =0.0.1, =0.0.4, =0.0.13, =1.0.2, =2.5.0, =2.5.0, =0.1.0b2696.post0.dev1, =0.1.8, =0.0.1, =1.0.2, =1.0.1, =4.1.0, =3.4.0, =4.0....

agentbuddy (0.1.1.dev33), airunner (>=3.0.0, <=3.1.7) +75 more potentially affected by CVE-2024-12911 via llama-index (>=0.4.17, <=0.12.2)

llama-index PYPI version =0.4.17, =3.0.0, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.1.1, =0.1.0, =0.4.0 and more Source cves: CVE-2024-12911 Source advisory: OSV:PYSEC-2026-1555...

airunner (>=3.0.0, <=3.1.7), blar-graph (>=1.0.0, <=1.1.6) +663 more potentially affected by CVE-2024-12704 via llama-index-core (>=0.9.56, <=0.12.0)

llama-index-core PYPI version =0.9.56, =3.0.0, =1.0.0, =0.0.3, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =1.0.9, =1.0.3.post1, =1.0.23.post1 and more Source cves: CVE-2024-12704 Source advisory: OSV:PYSEC-2026-1563...

PYSEC-2026-1563 LlamaIndex Improper Handling of Exceptional Conditions vulnerability

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

PYSEC-2026-1575 LLama Factory Remote OS Command Injection Vulnerability

Summary A critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure...