9 matches found
PYSEC-2026-1562 llama-index-core insecurely handles temporary files
The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...
7.3CVSS7AI score0.00134EPSS
SaveExploits0References6
20