CVE-2025-7707

HighCVSS 7.8

Published: 13/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from using a shared cache directory instead of a user-specific one.

Risk Assessment

A local attacker can modify or delete NLTK data files, causing denial of service, data tampering, or privilege escalation in multi-user environments.

Recommendation

Update the llama_index library to a version that does not use a shared cache directory for NLTK data, or configure the NLTK data directory to be user-specific with appropriate permissions. Restrict write permissions to the codebase directory.

Other vulnerabilities in llama_index

CVE-2023-39662Critical
Versions of llama_index up to 0.7.13 contain a vulnerability that allows a remote attacker to execute arbitrary code via the `exec` parameter in the PandasQueryEngine function.

Original NVD description (English source)

The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific one, making it susceptible to local data tampering and denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS