LlamaIndexGHSA-rg9h-vx28-xxp5
llama-index has Insecure Temporary File
High7.1CVE-2025-7707 · Published Oct 13, 2025 · updated Jul 7, 2026
The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific one, making it susceptible to local data tampering and denial of service.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| llama-index PyPI | < 0.13.0 | 0.13.0 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-377
- Also known as
- CVE-2025-7707, PYSEC-2026-1556
More LlamaIndex advisories
All LlamaIndex| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jan 12 | LlamaIndex: resource exhaustion High7.5Jan 12 | High7.5 | 0.12.3 |
| Jan 12 | LlamaIndex: unsafe deserializationHigh7.8Jan 12 | High7.8 | 0.11.7 |
| Sep 272025 | llama-index-core insecurely handles temporary filesHigh7.3Sep 27, 2025 | High7.3 | 0.13.0 |
| Aug 262025 | LlamaIndex affected by a Denial of Service (DOS) in JSONReaderHigh8.6Aug 26, 2025 | High8.6 | 0.12.38 |
| Jul 102025 | LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader classMedium6.5Jul 10, 2025 | Medium6.5 | 0.12.41 |
| Jul 72025 | LlamaIndex vulnerable to Path Traversal attack through its encode_image functionHigh7.5Jul 7, 2025 | High7.5 | 0.12.41 |