# llama-index (PyPI) vulnerabilities Source: https://junglewise.ai/threats/technologies/llama-index Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/llama-index.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 22 vulnerabilities in llama-index (PyPI): 0 in the last 7 days and 0 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2025-6211, was published on 13 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 22 (2 critical, 0 exploited in the wild) ## About llama-index (PyPI) LlamaIndex is a data framework for connecting custom data sources to large language models. ## Latest llama-index (PyPI) vulnerabilities - [CVE-2025-6211: PYSEC-2026-2606 - LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class](https://junglewise.ai/threats/cve-2025-6211-llamaindex-vulnerable-to-data-loss-through-hash-collisions-in-its) (low, CVSS 3, published 13 Jul 2026) - [CVE-2025-6209: PYSEC-2026-1558 - LlamaIndex vulnerable to Path Traversal attack through its encode_image function](https://junglewise.ai/threats/cve-2025-6209-llamaindex-path-traversal-in-encode-image-function) (low, CVSS 3, published 7 Jul 2026) - [CVE-2025-5472: PYSEC-2026-1559 - LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing](https://junglewise.ai/threats/cve-2025-5472-llamaindex-vulnerable-to-dos-attack-through-uncontrolled-recursive) (low, CVSS 3, published 7 Jul 2026) - [CVE-2025-6210: PYSEC-2026-1567 - LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit](https://junglewise.ai/threats/cve-2025-6210-llamaindex-obsidianreader-path-traversal-via-hardlinks) (low, CVSS 3, published 7 Jul 2026) - [CVE-2025-3046: PYSEC-2026-1568 - LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class](https://junglewise.ai/threats/cve-2025-3046-llamaindex-is-vulnerable-to-path-traversal-attack-through-its) (low, CVSS 3, published 7 Jul 2026) - [CVE-2025-3225: PYSEC-2026-1570 - LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser](https://junglewise.ai/threats/cve-2025-3225-llamaindex-has-an-xml-entity-expansion-vulnerability-in-its) (low, CVSS 3, published 7 Jul 2026) - [CVE-2025-3044: PYSEC-2026-1569 - LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions](https://junglewise.ai/threats/cve-2025-3044-llamaindex-vulnerability-in-arxivreader-class-can-cause-md5-hash) (low, CVSS 3, published 7 Jul 2026) - [CVE-2025-3108: PYSEC-2026-1564 - LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component](https://junglewise.ai/threats/cve-2025-3108-llamaindex-has-incomplete-documentation-of-program-execution) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2025-1753: PYSEC-2026-1557 - LLama-Index CLI OS command injection vulnerability](https://junglewise.ai/threats/cve-2025-1753-llama-index-cli-os-command-injection-vulnerability) (low, CVSS 3, published 7 Jul 2026) - [CVE-2025-1752: PYSEC-2026-1554 - LlamaIndex Vulnerable to Denial of Service (DoS)](https://junglewise.ai/threats/cve-2025-1752-llamaindex-vulnerable-to-denial-of-service-dos) (low, CVSS 3, published 7 Jul 2026) - [CVE-2024-12911: PYSEC-2026-1555 - LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions](https://junglewise.ai/threats/cve-2024-12911-llamaindex-vulnerable-to-creation-of-temporary-file-in-directory) (low, CVSS 3, published 7 Jul 2026) - [CVE-2024-12704: PYSEC-2026-1563 - LlamaIndex Improper Handling of Exceptional Conditions vulnerability](https://junglewise.ai/threats/cve-2024-12704-llamaindex-improper-handling-of-exceptional-conditions) (low, CVSS 3, published 7 Jul 2026) - [CVE-2024-4181: PYSEC-2026-1565 - RunGptLLM class in LlamaIndex has a command injection](https://junglewise.ai/threats/cve-2024-4181-rungptllm-class-in-llamaindex-has-a-command-injection) (low, CVSS 3, published 7 Jul 2026) - [CVE-2024-45201: PYSEC-2026-395 - LlamaIndex includes an exec call for `import {cls_name}`](https://junglewise.ai/threats/cve-2024-45201-llamaindex-includes-an-exec-call-for-import-cls-name) (low, CVSS 3.1, published 29 Jun 2026) - [CVE-2024-58339: LlamaIndex resource exhaustion in VannaQueryEngine SQL execution](https://junglewise.ai/threats/cve-2024-58339-llamaindex-resource-exhaustion-in-vannaqueryengine-sql-execution) (high, CVSS 7.5, published 12 Jan 2026) - [CVE-2024-14021: LlamaIndex unsafe deserialization in BGEM3Index load_from_disk](https://junglewise.ai/threats/cve-2024-14021-llamaindex-unsafe-deserialization-in-bgem3index-load-from-disk) (high, CVSS 7.8, published 12 Jan 2026) - [CVE-2025-7707: PYSEC-2026-1556 - llama-index has Insecure Temporary File](https://junglewise.ai/threats/cve-2025-7707-llama-index-has-insecure-temporary-file) (high, CVSS 7.8, published 13 Oct 2025) - [CVE-2025-1793: run-llama llama-index SQL injection in vector store integrations](https://junglewise.ai/threats/cve-2025-1793-run-llama-llama-index-sql-injection-in-vector-store-integrations) (critical, CVSS 9.8, published 5 Jun 2025) - [CVE-2025-1750: LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id](https://junglewise.ai/threats/cve-2025-1750-pysec-2025-245-an-sql-injection-vulnerability-exists-in-the-delete) (critical, CVSS 9.8, published 2 Jun 2025) - [CVE-2024-12910: LlamaIndex Uncontrolled Resource Consumption vulnerability](https://junglewise.ai/threats/cve-2024-12910-llamaindex-uncontrolled-resource-consumption-vulnerability) (low, CVSS 3.1, published 20 Mar 2025) - [CVE-2024-23751: LlamaIndex SQL injection in Text-to-SQL feature](https://junglewise.ai/threats/cve-2024-23751-llamaindex-sql-injection-in-text-to-sql-feature) (low, CVSS 3.1, published 22 Jan 2024) - [CVE-2023-39662: llama-index arbitrary code execution in PandasQueryEngine](https://junglewise.ai/threats/cve-2023-39662-llama-index-arbitrary-code-execution-in-pandasqueryengine) (low, CVSS 3.1, published 15 Aug 2023) ## Most severe llama-index (PyPI) vulnerabilities - [CVE-2025-1750: LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id](https://junglewise.ai/threats/cve-2025-1750-pysec-2025-245-an-sql-injection-vulnerability-exists-in-the-delete) (critical, CVSS 9.8, published 2 Jun 2025) - [CVE-2025-1793: run-llama llama-index SQL injection in vector store integrations](https://junglewise.ai/threats/cve-2025-1793-run-llama-llama-index-sql-injection-in-vector-store-integrations) (critical, CVSS 9.8, published 5 Jun 2025) - [CVE-2024-14021: LlamaIndex unsafe deserialization in BGEM3Index load_from_disk](https://junglewise.ai/threats/cve-2024-14021-llamaindex-unsafe-deserialization-in-bgem3index-load-from-disk) (high, CVSS 7.8, published 12 Jan 2026) - [CVE-2025-7707: PYSEC-2026-1556 - llama-index has Insecure Temporary File](https://junglewise.ai/threats/cve-2025-7707-llama-index-has-insecure-temporary-file) (high, CVSS 7.8, published 13 Oct 2025) - [CVE-2024-58339: LlamaIndex resource exhaustion in VannaQueryEngine SQL execution](https://junglewise.ai/threats/cve-2024-58339-llamaindex-resource-exhaustion-in-vannaqueryengine-sql-execution) (high, CVSS 7.5, published 12 Jan 2026) - [CVE-2023-39662: llama-index arbitrary code execution in PandasQueryEngine](https://junglewise.ai/threats/cve-2023-39662-llama-index-arbitrary-code-execution-in-pandasqueryengine) (low, CVSS 3.1, published 15 Aug 2023) - [CVE-2024-12910: LlamaIndex Uncontrolled Resource Consumption vulnerability](https://junglewise.ai/threats/cve-2024-12910-llamaindex-uncontrolled-resource-consumption-vulnerability) (low, CVSS 3.1, published 20 Mar 2025) - [CVE-2024-23751: LlamaIndex SQL injection in Text-to-SQL feature](https://junglewise.ai/threats/cve-2024-23751-llamaindex-sql-injection-in-text-to-sql-feature) (low, CVSS 3.1, published 22 Jan 2024) - [CVE-2024-45201: PYSEC-2026-395 - LlamaIndex includes an exec call for `import {cls_name}`](https://junglewise.ai/threats/cve-2024-45201-llamaindex-includes-an-exec-call-for-import-cls-name) (low, CVSS 3.1, published 29 Jun 2026) - [CVE-2025-3108: PYSEC-2026-1564 - LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component](https://junglewise.ai/threats/cve-2025-3108-llamaindex-has-incomplete-documentation-of-program-execution) (low, CVSS 3.1, published 7 Jul 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other PyPI technologies - [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities - [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities - [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities - [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities - [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities - [apache-airflow (PyPI)](https://junglewise.ai/threats/technologies/apache-airflow): 159 vulnerabilities - [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities - [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities - [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities - [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities - [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities - [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "llama-index (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/llama-index, 13 November 2026.