What is CVE-2025-7647?

CVE-2025-7647 is a high-severity vulnerability in Run-Llama Run-Llama/llama Index, classified under Creation of Temporary File With Insecure Permissions. CVSS score: 7.3/10. Published 2025-09-27.

How severe is CVE-2025-7647?

High severity. CVSS v3 base score is 7.3 out of 10.

Is CVE-2025-7647 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Run-Llama Run-Llama/llama Index

CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/tmp/llama_index` is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions.

EPSS: 0.001 (4.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L.

Affected products

Run-llama Run-llama/llama_index — versions unspecified

Weakness classification (CWE)

CWE-378 — Creation of Temporary File With Insecure Permissions

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

Frequently asked questions

What is CVE-2025-7647?: CVE-2025-7647 is a high-severity vulnerability in Run-Llama Run-Llama/llama Index, classified under Creation of Temporary File With Insecure Permissions. CVSS score: 7.3/10. Published 2025-09-27.
How severe is CVE-2025-7647?: High severity. CVSS v3 base score is 7.3 out of 10.
Is CVE-2025-7647 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.