LlamaIndex
Filed as: llama-index-core, llama_index, llama-index
Newest record 2026-03-31 · 21 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for LlamaIndex has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 21
- closed5.3LlamaIndex CVE-2025-6208: llama-index-core vulnerable to resource exhaustion
Disclosed · since 2 Feb 2026 · CVE-2025-6208
AI - closed8.4LlamaIndex CVE-2024-14021: LlamaIndex unsafe deserialization vulnerability
Disclosed · since 12 Jan 2026 · CVE-2024-14021
AI - closed8.7LlamaIndex CVE-2024-58339: LlamaIndex uncontrolled resource consumption in VannaQueryEngine
Disclosed · since 12 Jan 2026 · CVE-2024-58339
AI - closed7.1LlamaIndex CVE-2025-7707: llama-index Insecure Temporary File Vulnerability
Disclosed · since 13 Oct 2025 · CVE-2025-7707
AI - closed7.3LlamaIndex CVE-2025-7647: llama-index-core insecurely handles temporary files
Disclosed · since 27 Sep 2025 · CVE-2025-7647
AI - closed8.6LlamaIndex CVE-2025-5302: LlamaIndex Denial of Service in JSONReader
Disclosed · since 26 Aug 2025 · CVE-2025-5302
AI - closed6.5LlamaIndex CVE-2025-6211: LlamaIndex vulnerable to data loss via MD5 hash collisions
Disclosed · since 10 Jul 2025 · CVE-2025-6211
AI - closed7.5LlamaIndex CVE-2025-6209: LlamaIndex path traversal vulnerability in encode_image
Disclosed · since 7 Jul 2025 · CVE-2025-6209
AI - closed5.0LlamaIndex LlamaIndex vulnerable to remote code execution in JsonPickleSerializer
Disclosed · since 7 Jul 2025 · CVE-2025-3108
AI - closed6.5LlamaIndex LlamaIndex vulnerable to DoS through recursive JSON parsing
Disclosed · since 7 Jul 2025 · CVE-2025-5472
AI - closed9.8LlamaIndex CVE-2025-1793: LlamaIndex SQL Injection Vulnerability
Disclosed · since 5 Jun 2025 · CVE-2025-1793
AI - closed7.5LlamaIndex CVE-2025-1752: LlamaIndex Vulnerable to Denial of Service via KnowledgeBaseWebReader
Disclosed · since 10 May 2025 · CVE-2025-1752
AI - closed7.1LlamaIndex CVE-2024-12911: LlamaIndex Prompt Injection and SQL Injection Flaw
Disclosed · since 20 Mar 2025 · CVE-2024-12911
AI - closed5.9LlamaIndex CVE-2024-12910: LlamaIndex Uncontrolled Resource Consumption
Disclosed · since 20 Mar 2025 · CVE-2024-12910
AI - closed7.5LlamaIndex CVE-2024-12704: LlamaIndex denial of service vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-12704
AI - closed9.8LlamaIndex CVE-2024-45201: LlamaIndex dynamic import execution vulnerability
Disclosed · since 22 Aug 2024 · CVE-2024-45201
AI - closed8.8LlamaIndex CVE-2024-4181: LlamaIndex RunGptLLM Command Injection
Disclosed · since 16 May 2024 · CVE-2024-4181
AI - closed9.8LlamaIndex CVE-2024-3271: LlamaIndex command injection vulnerability
Disclosed · since 16 Apr 2024 · CVE-2024-3271
AI - closed9.8LlamaIndex Llama Index Core Prompt Injection Leading to Code Execution
Disclosed · since 10 Apr 2024 · CVE-2024-3098
AI - closed9.8LlamaIndex CVE-2024-23751: SQL injection vulnerability in LlamaIndex
Disclosed · since 22 Jan 2024 · CVE-2024-23751
AI - closed9.8LlamaIndex CVE-2023-39662: llama-index vulnerable to arbitrary code execution
Disclosed · since 15 Aug 2023 · CVE-2023-39662
AI
Other incidents: research and unexploited reports · 1
- closedLangChain family RCE Vulnerabilities in LLM-Integrated Applications via Prompt Injection
Research · since 27 Feb 2025
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.