{
 "id": "AIR-2025-0281",
 "slug": "cve-2025-1752-llamaindex-vulnerable-to-denial-of-service-via",
 "title": "CVE-2025-1752: LlamaIndex Vulnerable to Denial of Service via KnowledgeBaseWebReader",
 "summary": "A denial of service vulnerability in LlamaIndex allows attackers to exhaust Python's recursion limit through repeated function calls via the KnowledgeBaseWebReader class. The vulnerability leads to resource exhaustion and crashing of the Python process.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LlamaIndex"
 ],
 "incident_date": "2025-05-10",
 "incident_date_precision": "day",
 "first_reported": "2025-05-10",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-7c85-87cp-mr6g",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2025-1752: LlamaIndex Vulnerable to Denial of Service (DoS)",
   "published_at": "2025-05-10"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2025-1752",
  "llamaindex",
  "dos"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}