Skip to content
OpenAdvisories

Package · PyPI

llama-index-cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.8
    CVE-2025-1753

    Command Injection in LLama-Index CLI in run-llama/llama_index

    LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the `--files` argument, which is directly passed into `os.system`. An attacker who controls the content of this argument ca…

    run-llama run-llama/llama_index llama-index llama-index-cli PyPI