CVE-2025-1753High· 7.8▾ TwilightA flaw was found in the LLama-Index CLI component. This vulnerability allows arbitrary code execution via unsanitized input to the --files argument, which is directly passed to os.system without proper validation or escaping. An attacker w…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
1.0%
Last analysed / modified upstream
1.0% → 1.1%
A flaw was found in the LLama-Index CLI component. This vulnerability allows arbitrary code execution via unsanitized input to the --files argument, which is directly passed to os.system without proper validation or escaping. An attacker with control over the CLI input can inject and execute arbitrary shell commands. While the vulnerability is primarily exploitable locally by users who can pass arguments to the CLI, it may also be exploited remotely if the CLI is invoked by a web application using untrusted user input. This can result in full compromise of the underlying system, including unauthorized access, data loss, or service disruption.
llama-index: Command Injection in LLama-Index CLI in run-llama/llama_index — rated Important by Red Hat. Released 2025-05-28, updated 2026-10-15.
Affected:
No fix planned:
Not affected:
Affected
Affected packages:
llama-index-cli < 0.4.1Patched in:
llama-index-cli 0.4.1Connected by shared product, vendor, weakness, or advisory.
CVE-2024-12704High· 7.5llama-index: Denial of Service (DoS) in run-llama/llama_index (CVE-2024-12704)
CVE-2026-55607High· 7.1Claude Code: @anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion (CVE-2026-55607)
CVE-2026-27888Medium· 5.3pypdf: pypdf: Denial of Service via crafted PDF (CVE-2026-27888)
CVE-2026-27025Medium· 6.5pypdf: pypdf: Denial of Service via crafted PDF with large font values (CVE-2026-27025)
CVE-2026-33123Medium· 4.3pypdf: pypdf: Denial of Service due to excessive resource consumption from crafted PDF (CVE-2026-33123)
CVE-2026-27794Medium· 6.6langgraph-checkpoint: LangGraph Checkpoint: Remote Code Execution via insecure deserialization in caching layer (CVE-2026-27794)