Executive brief
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
Affected products
- PyPI llama-index-readers-docugami
- PyPI llama-index
Junglewise Threat Intelligence
CVE-2025-6211: PYSEC-2026-2606 - LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
CVE-2025-6211 · Severity: low · CVSS 3 · Published 2026-07-13
Technologies: llama-index (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1556 - llama-index has Insecure Temporary File
- PYSEC-2026-1558 - LlamaIndex vulnerable to Path Traversal attack through its encode_image function
- PYSEC-2026-1559 - LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
- PYSEC-2026-1567 - LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit
- PYSEC-2026-1568 - LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class