Run-llama vulnerabilities
26 CVEs and advisories name Run-llama as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-6208Uncontrolled Memory Consumption in run-llama/llama_index
- CVE-2024-14021LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization
- CVE-2024-58339LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion
- CVE-2025-7707World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index
- CVE-2025-7647Insecure Temporary File Handling in run-llama/llama_index
- CVE-2025-5302Denial of Service (DOS) in JSONReader in run-llama/llama_index
- CVE-2025-6211MD5 Hash Collision in run-llama/llama_index
- CVE-2025-6209Arbitrary File Read through Path Traversal in run-llama/llama_index
- CVE-2025-5472Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index
- CVE-2025-6210Hardlink-Based Path Traversal in run-llama/llama_index
- CVE-2025-3046Path Traversal via Symbolic Links in run-llama/llama_index
- CVE-2025-3044MD5 Hash Collision in run-llama/llama_index
- CVE-2025-3225XML Entity Expansion vulnerability in run-llama/llama_index
- CVE-2025-3108Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index
- CVE-2025-1793SQL Injection in run-llama/llama_index
- CVE-2025-1750SQL Injection in run-llama/llama_index
- CVE-2025-1753Command Injection in LLama-Index CLI in run-llama/llama_index
- CVE-2025-1752Denial of Service in run-llama/llama_index
- CVE-2024-11958SQL Injection in run-llama/llama_index
- CVE-2024-12911SQL Injection in run-llama/llama_index
- CVE-2024-12909SQL Injection to RCE in run-llama/llama_index
- CVE-2024-12910Denial of Service in run-llama/llama_index
- CVE-2024-12704Denial of Service (DoS) in run-llama/llama_index
- CVE-2024-4181Command Injection in run-llama/llama_index
- CVE-2024-3271Command Injection in run-llama/llama_index
- CVE-2024-3098Prompt Injection leading to Arbitrary Code Execution in run-llama/llama_index