---
id: CVE-2025-1753
title: >-
  llama-index: Command Injection in LLama-Index CLI in run-llama/llama_index
  (CVE-2025-1753)
summary: >-
  A flaw was found in the LLama-Index CLI component. This vulnerability allows
  arbitrary code execution via unsanitized input to the --files argument, which
  is directly passed to os.system without proper validation or escaping. An
  attacker w…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: vendor
cwe: CWE-78
vendor: Red Hat
product: OpenShift Lightspeed
affected:
  - openshift_lightspeed
patched:
  - llama-index-cli 0.4.1
published: '2025-05-28'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:09:02+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1753.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1753.json
  - url: 'https://access.redhat.com/security/cve/CVE-2025-1753'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2368930'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2025-1753'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-1753'
  - url: >-
      https://github.com/run-llama/llama_index/commit/b57e76738c53ca82d88658b82f2d82d1c7839c7d
  - url: 'https://huntr.com/bounties/19e1c67e-1d77-451d-b10b-acbe99900b22'
  - url: 'https://github.com/run-llama/llama_index'
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - pip
epss: 0.01142
epssPercentile: 0.66518
aliases:
  - GHSA-g99h-56mw-8263
  - PYSEC-2026-1557
ecosystem: pip
ingestedAt: '2026-07-08T18:25:49.688Z'
---

## Overview

A flaw was found in the LLama-Index CLI component. This vulnerability allows arbitrary code execution via unsanitized input to the --files argument, which is directly passed to os.system without proper validation or escaping. An attacker with control over the CLI input can inject and execute arbitrary shell commands. While the vulnerability is primarily exploitable locally by users who can pass arguments to the CLI, it may also be exploited remotely if the CLI is invoked by a web application using untrusted user input. This can result in full compromise of the underlying system, including unauthorized access, data loss, or service disruption.

## Vendor advisories

- **Red Hat VEX** · Important · affected: OpenShift Lightspeed · no fix planned: OpenShift Lightspeed · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1753.json)

**llama-index: Command Injection in LLama-Index CLI in run-llama/llama_index** — rated Important by Red Hat. Released 2025-05-28, updated 2026-10-15.

Affected:

- OpenShift Lightspeed

No fix planned:

- OpenShift Lightspeed

Not affected:

- Red Hat Ansible Automation Platform 2

## Remediation

Affected

## Package advisory (CVE-2025-1753)

Affected packages:

- `llama-index-cli < 0.4.1`

Patched in:

- `llama-index-cli 0.4.1`

Source: https://osv.dev/vulnerability/GHSA-g99h-56mw-8263