CVE-2023-39662
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
Versions of llama_index up to 0.7.13 contain a vulnerability that allows a remote attacker to execute arbitrary code via the `exec` parameter in the PandasQueryEngine function.
Risk Assessment
An attacker could exploit this vulnerability to remotely execute code, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to upgrade to version 0.7.14 or later to mitigate this vulnerability.
Other vulnerabilities in llama_index
See all- CVE-2025-7707High
The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from using a shared cache directory instead of a user-specific one.
- CVE-2025-6210Medium
A vulnerability in the ObsidianReader class of run-llama/llama_index version 0.12.27 allows hardlink-based path traversal. Attackers can bypass path restrictions and access sensitive system files such as /etc/passwd by exploiting hardlinks; the flaw stems from inadequate hardlink handling in the load_data() method. The issue is resolved in version 0.5.2.
Original NVD description (English source)
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS