LlamaIndex vulnerabilities and CVEs
The Beam CVE database tracks 19 security advisories for LlamaIndex: 6 critical, 8 high and 5 medium severity. The newest is CVE-2025-6208, published Feb 2, 2026 and fixed in 0.12.41.
A framework for retrieval and agent apps over private data.
Check your version: pip show llama-index or pip show llama-index-core or npm ls llamaindex
- Vulnerabilities tracked
- 19
- Critical
- 6
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2025-6208
llama-index-core vulnerable to Uncontrolled Resource Consumption
medium5.3Feb 2, 2026CVE-2025-7707
llama-index has Insecure Temporary File
high7.1Oct 13, 2025CVE-2025-7647
llama-index-core insecurely handles temporary files
high7.3Sep 27, 2025CVE-2025-5302
LlamaIndex affected by a Denial of Service (DOS) in JSONReader
high8.6Aug 26, 2025CVE-2025-6211
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
medium6.5Jul 10, 2025CVE-2025-3108
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
medium5.0Jul 7, 2025CVE-2025-5472
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
medium6.5Jul 7, 2025CVE-2025-6209
LlamaIndex vulnerable to Path Traversal attack through its encode_image function
high7.5Jul 7, 2025CVE-2025-1793
llama_index vulnerable to SQL Injection
critical9.8Jun 5, 2025CVE-2025-1752
LlamaIndex Vulnerable to Denial of Service (DoS)
high7.5May 10, 2025CVE-2024-12704
LlamaIndex Improper Handling of Exceptional Conditions vulnerability
high7.5Mar 20, 2025CVE-2024-12910
LlamaIndex Uncontrolled Resource Consumption vulnerability
medium5.9Mar 20, 2025CVE-2024-12911
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
high7.1Mar 20, 2025CVE-2024-45201
LlamaIndex includes an exec call for `import {cls_name}`
critical9.8Aug 22, 2024CVE-2024-4181
RunGptLLM class in LlamaIndex has a command injection
high8.8May 16, 2024CVE-2024-3271
llama-index-core Command Injection vulnerability
critical9.8Apr 16, 2024CVE-2024-3098
llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution
critical9.8Apr 10, 2024CVE-2024-23751
SQL injection in llama-index
critical9.8No fixJan 22, 2024CVE-2023-39662
llama-index vulnerable to arbitrary code execution
critical9.8Aug 15, 2023