repository icon
run-llama / llama_index Project repository

LlamaIndex is a data framework for your LLM applications

Submit a report

FIRST INTERACTION

WITHIN22 DAYS

REVIEW

WITHIN25 DAYS

FIX

WITHIN87 DAYS

Remote Code Execution via Unsafe Pickle Deserialization in SimpleObjectNodeMappi...
itsbalvant
not applicable
Remote Code Execution via Unsafe Pickle Deserialization in BGEM3Index (multi_emb...
itsbalvant
not applicable
Remote Code Execution via Unsafe Pickle Deserialization in 'TxtaiVectorStore'
itsbalvant
not applicable
Arbitrary Code Execution via eval() in FaissMapVectorStore id_map Loader
itsbalvant
not applicable
Insecure File Persistence in SimpleVectorStore Exposes Sensitive Data
0xmrniko
not applicable
SQL Injection in ClickHouse Vector Store Metadata Filtering
mysterious75
informative
Critical
Server-Side Request Forgery (SSRF) in LlamaIndex SimpleWebPageReader allows acce...
gauss-security
duplicate
Critical
Critical Template Injection in GitHub Actions Workflows
anasboulbali
not applicable
Path Traversal via SimpleDirectoryReader
choocs
not applicable
SQL Injection in Vector Search via Bigquery
faizann24
informative
Critical
JSON Injection Vulnerability in LlamaIndex Question Generation Module Leading to...
damcrazy
spam
Race Condition in FunctionCallingAgentWorker
madan301
informative
High
Arbitary File Read Through Path Traversal
choocs
duplicate
High
DoS through image-URL-validation
patrik-ha
informative
High
No Check for Duplicate Entries
madan301
not applicable
No State Rollback on Partial Failure
madan301
not applicable
Command Injection Vulnerability in llama-index-tools-mcp
bayuncao-bit
informative
Critical
Silent Duplicate Dispatcher Registration Vulnerability
madan301
not applicable
Context Reset Workaround Vulnerability in Async Span Management
madan301
not applicable
Shared State Vulnerability in llama_index_instrumentation Dispatcher Due to Muta...
madan301
informative
High
Deepseek API Key Leaked on Repository
aydinnyunus
informative
Medium
SSRF VULNERABILITY REPORT - LLAMA-INDEX
jplopezy
duplicate
High
Backoff Retry Functions in run-llama/llama_index Allow Resource Exhaustion via I...
madan301
informative
Medium
World-Writable NLTK Cache Directory Enables Local Users to Tamper with or Delete...
madan301
High
•$750•CVE-2025-7707
OS Command Injection in llama-index-cli RAG Tool
colemurray
informative
High
Insecure Temporary File Handling Vulnerability in llama-index-core
anwarayoob
High
•$750•CVE-2025-7647
Pickle Deserialization Remote Code Execution in llama-index-core
anwarayoob
informative
Critical
XML Entity Expansion vulnerability in XMLReader
anwarayoob
informative
Medium
Path Traversal in `ObsidianReader`
ouxs-19
informative
High
llama_index.readers.file.paged_csv has an arbitrary file read vulnerability
chy4412312
informative
High
Denial of Service via UnstructuredReader split document path
0xmanan
informative
Medium
access key leaks in [Alibaba Cloud]
rashidkhanpathan
informative
Medium
SQL Injection in Multiple Vector Stores via Unsanitized Input in delete Method D...
kunstnicht
informative
Critical
CQL Injection in LlamaIndex Cassandra Integration
mohit121312
informative
Critical
XML Entity Expansion vulnerability in XMLReader
makerdd
duplicate
High
SQL Injection in RelytVectorStore#init_index() can lead to RCE
liankee
informative
Critical
llama-index-readers-file has a billion-laugh vulnerability
chy4412312
duplicate
High
File URI Access in LlamaIndex `StripeDocsReader`
ready-research
informative
High
Path Traversal via Symbolic Links in `MarkItDownReader` in run-llama/llama_index
ready-research
informative
High
XML Entity Expansion vulnerability in XMLReader load_data
meme-dm
duplicate
High
SQL Injection in OceanBaseVectorStore via delete()
cyjhhh
informative
Critical
SSRF via AsyncWebPageReader with Unvalidated Sitemap Input
sandeepl337
informative
High
XML Entity Expansion vulnerability in XMLReader parser in run-llama/llama_index
ready-research
duplicate
Critical
Arbitrary File Read via Crated Node in JaguarVectorStore add
pricx
informative
Critical
Arbitrary Code Execution via Malicious Module Resolution in LlamaIndex Workflow...
0xmrniko
informative
Critical
SQL Cypher Injection in graphstore and potential RCE via prompt injection
pricx
informative
Critical
File Bomb / CPU Exhaust
pricx
informative
High
SSRF in llama_index.core.schema.ImageDocument
lonelyuan
not applicable
Cypher Injection via llama_index.tools.neo4j
zpbrent
informative
High
SQL Injection via load_data(query: str) in llama_index.tools.database
zpbrent
informative
Critical
Browser-based SSRF via llama-index-tools-playwright
zpbrent
informative
Critical
Vulnerability Report: Arbitrary Code Execution
mohit121312
informative
Critical
Cypher Injection in FalkorDBPropertyGraphStore via get_triplets can lead to LFI,...
polaris-snowfall
informative
High
Denial of Service(DOS) in SimpleFileNodeParser(llama_index_core)
winters0x64
informative
High
Denial of Service(DOS) in XMLReader
winters0x64
informative
High
Denial of Service(DOS) in SitemapReader while parsing nested html elements
winters0x64
informative
High
Uncontrolled recursion which leads to Denial Of Service
winters0x64
duplicate
High
llama-index-readers-pandas-ai can trigger RCE through conversation
bacmiao
not applicable
Denial of Service(DOS) in JSONReader
winters0x64
High
•$750•CVE-2025-5302
Denial of Service(DOS) in KnowledgeBaseWebReader in run-llama/llama_index
ready-research
informative
High
Bypass lastest patched: Extract all data from OracleDB via SQL injection
m4dn355
informative
High
SQL Injection in SingleStoreReader
hatlesswizard
informative
Critical
Prompt Injection trought Metadata leads to Arbitrary file read
hatlesswizard
informative
High
Arbitrary Code Execution via Unsafe pickle.load() in SimpleObjectNodeMapping.fro...
michaelpierre
duplicate
High
Arbitrary Code Execution via Unsafe Pickle Deserialization in `TxtaiVectorStore`
0xmanan
informative
High
Unsafe Deserialization in `SimpleObjectNodeMapping` Enables Arbitrary Code Execu...
0xmrniko
informative
Critical
Missing Query Validation in Hive – Enables Data Deletion, Insertion, RCE and Mor...
siriusbellatrix
informative
Critical
Code injection in safe_exec
ehtec
informative
Critical
Hash Collision in `SimpleObjectNodeMapping` via Python `hash()` Causing Silent D...
0xmrniko
not applicable
MD5 Hash Collision in DocugamiReader Overwrites Structurally Distinct Chunks wit...
siriusbellatrix
Medium
•$125•CVE-2025-6211
Denial of Service via `Uncontrolled Recursive` JSON Parsing in `JSONReader`
0xmrniko
Medium
•$125•CVE-2025-5472
Hardlink-Based Path Traversal in ObsidianReader
0xmanan
Medium
•$125•CVE-2025-6210
Arbitary file read through path traversal
0xmanan
High
•$750•CVE-2025-6209
Unsafe `Deserialization` in `JsonPickleSerializer` Enables Remote Code Execution
0xmrniko
Medium
•$125•CVE-2025-3108
Code Execution via Untrusted Query Transform
cyfra07
not applicable
LlamaIndex Core - RCE via CustomQueryEngine subclass abuse
cyfra07
not applicable
SSRF via `unvalidated webhook_url`
0xmanan
not applicable
Path Traversal via Symbolic Links in `ObsidianReader`
0xmrniko
High
•$750•CVE-2025-3046
Uncontrolled Memory Consumption in `SimpleDirectoryReader` Due to Post-Limit Fil...
0xmrniko
Medium
•$125•CVE-2025-6208
SQL Injection Vulnerability in Jaguar Database Leading to Complete Data Deletion
khanhd192
duplicate
High
MD5 Hash Collision Causes Overwriting of Papers with the Same Title, Leading to...
siriusbellatrix
Medium
•$125•CVE-2025-3044
SSRF via Simple Web scraper in llama_index.readers.web
khanhd192
not applicable
SQL injection in OracleDB via drop_table_purge function can extract all data fro...
m4dn355
duplicate
High
SQL Injection in ClickHouse via query index can get all data from database
nxczje
duplicate
High
SQL Injection in ClickHouseVectorStore via delete can dump database
nxczje
duplicate
High
Filename enumeration and limited LFI
ehtec
informative
Medium
XML Entity Expansion vulnerability in Sitemap parser
ehtec
High
•$1500•CVE-2025-3225
SQL injection vulnerabilities in multiple vector stores
ehtec
Critical
•$3000•CVE-2025-1793
Command injection in LLama-Index CLI
ehtec
High
•$750•CVE-2025-1753
SQL Injection in DuckDBVectorStore via delete can lead to RCE
meme-dm
Critical
•$1500•CVE-2025-1750
A DoS attack occurred in run-llama/llama_index due to inappropriate secure codin...
siriusbellatrix
High
•$750•CVE-2025-1752
Denial of Service(DOS) in LangChainLLM due to missing exception handler.
life-team2024
High
•$750•CVE-2024-12704
SQL Injection to RCE on FinanceChatLlamaPack
life-team2024
Critical
•$1500•CVE-2024-12909
Denial of Service (DoS) via SQL Injection on VannaQueryEngine in run-llama/llama...
life-team2024
informative
High
A SQL Injection in DuckDB via prompt can lead to RCE
life-team2024
Critical
•$1500•CVE-2024-11958
SQL Injection in default_jsonalyzer via prompt injection leads to arbitrary file...
life-team2024
High
•$750•CVE-2024-12911
Denial of Service(DOS) in KnowledgeBaseWebReader
life-team2024
Medium
•$125•CVE-2024-12910
pickle.load() in load_from_disk function of BGEM3Index class
life-team2024
informative
High
A method in Llama-index-core has a Deserialization of Untrusted Data vulnerabili...
life-team2024
informative
High
Download and install packs from untrusted URL leading to a code arbitrary execut...
0gur1
informative
Critical
Code Injection in llama_index.core.download.integration in run-llama/llama_index
yuligesec
informative
Critical
safe_exec bypass lead to RCE
tianstcht
not applicable
Prompt injection lead to arbitrary file read
lyutoon
duplicate
Critical
Code Execution due to Prompt Injection
ouxs-19
Critical
•$1500
Remote code execute by using safe_exec
trongphuc12
Critical
•$1500
*
0xanis
self closed
safe_eval bypass lead to RCE (Command Injection)
danisjiang
Critical
•$1500•CVE-2024-3271
Malicious file loaded to RCE in EmbeddedTablesUnstructuredRetrieverPack
supersuperbang
informative
High
Improper Certificate Validation in the Cogniswitch Query Engine
ehtec
informative
Medium
Command injection due to use of eval in RunGptLLM
ehtec
High
•$750•CVE-2024-4181
Prompt Injection leading to Arbitrary Code Execution
yh-0x7
Critical
•$1500•CVE-2024-3098
Code injection at command_line/rag.py
rook1337
self closed