RCE in Llamaindex
CVE-2025-1753
LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the `--files` argument, which is directly passed into `os.system`. An attacker who controls the content of this argument can inject and execute arbitrary shell commands. This vulnerability can be exploited locally if the attacker has control over the CLI arguments, and remotely if a web application calls the LLama-Index CLI with a user-controlled filename. This issue can lead to arbitrary code execution on the affected system.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.010 (60.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Llamaindex — versions 0.12.20
- Run-llama Run-llama/llama_index — versions unspecified
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@huntr.dev (Exploit, Third Party Advisory)
- security@huntr.dev (Patch)
Frequently asked questions
- What is CVE-2025-1753?
- CVE-2025-1753 is a high-severity vulnerability in Llamaindex, classified under OS Command Injection. CVSS score: 7.8/10. Published 2025-05-28.
- How severe is CVE-2025-1753?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2025-1753 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.