Lucene search
+L

1 matches found

PyPA
PyPA
added 2026/07/07 4:02 p.m.20 views

LlamaIndex vulnerable to Path Traversal attack through its encode_image function

A path traversal vulnerability exists in run-llama/llamaindex versions 0.11.23 through 0.12.40, specifically within the encodeimage function in genericutils.py. This vulnerability allows an attacker to manipulate the imagepath input to read arbitrary files on the server, including sensitive syste...

7.5CVSS6AI score0.00545EPSS
SaveExploits1References7Affected Software1
Rows per page
Query Builder