{"id":"CVE-2025-1753","title":"llama-index: Command Injection in LLama-Index CLI in run-llama/llama_index (CVE-2025-1753)","summary":"A flaw was found in the LLama-Index CLI component. This vulnerability allows arbitrary code execution via unsanitized input to the --files argument, which is directly passed to os.system without proper validation or escaping. An attacker w…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"vendor","cwe":"CWE-78","vendor":"Red Hat","product":"OpenShift Lightspeed","affected":["openshift_lightspeed"],"patched":["llama-index-cli 0.4.1"],"published":"2025-05-28","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:09:02+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1753.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1753.json"},{"url":"https://access.redhat.com/security/cve/CVE-2025-1753"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368930"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-1753"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1753"},{"url":"https://github.com/run-llama/llama_index/commit/b57e76738c53ca82d88658b82f2d82d1c7839c7d"},{"url":"https://huntr.com/bounties/19e1c67e-1d77-451d-b10b-acbe99900b22"},{"url":"https://github.com/run-llama/llama_index"}],"tags":["csaf","vex","red-hat","osv","pip"],"epss":0.01142,"epssPercentile":0.66518,"aliases":["GHSA-g99h-56mw-8263","PYSEC-2026-1557"],"ecosystem":"pip","ingestedAt":"2026-07-08T18:25:49.688Z","slug":"CVE-2025-1753","body":"## Overview\n\nA flaw was found in the LLama-Index CLI component. This vulnerability allows arbitrary code execution via unsanitized input to the --files argument, which is directly passed to os.system without proper validation or escaping. An attacker with control over the CLI input can inject and execute arbitrary shell commands. While the vulnerability is primarily exploitable locally by users who can pass arguments to the CLI, it may also be exploited remotely if the CLI is invoked by a web application using untrusted user input. This can result in full compromise of the underlying system, including unauthorized access, data loss, or service disruption.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: OpenShift Lightspeed · no fix planned: OpenShift Lightspeed · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1753.json)\n\n**llama-index: Command Injection in LLama-Index CLI in run-llama/llama_index** — rated Important by Red Hat. Released 2025-05-28, updated 2026-10-15.\n\nAffected:\n\n- OpenShift Lightspeed\n\nNo fix planned:\n\n- OpenShift Lightspeed\n\nNot affected:\n\n- Red Hat Ansible Automation Platform 2\n\n## Remediation\n\nAffected\n\n## Package advisory (CVE-2025-1753)\n\nAffected packages:\n\n- `llama-index-cli < 0.4.1`\n\nPatched in:\n\n- `llama-index-cli 0.4.1`\n\nSource: https://osv.dev/vulnerability/GHSA-g99h-56mw-8263","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}