LlamaIndex

Patch now: confirmed exploitation or KEV · 0

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

No record for LlamaIndex has confirmed exploitation or a KEV flag.

Disclosed CVEs, no confirmed exploitation · 21

1. 2026-02-02
   CVE-2025-6208

   CVE-2025-6208: llama-index-core vulnerable to resource exhaustion

   2 Discloseddenial-of-service

   record AIR-2026-0445GitHub Advisory Database ↗
2. 2026-01-12
   CVE-2024-14021

   CVE-2024-14021: LlamaIndex unsafe deserialization vulnerability

   2 Discloseddeserialization · infra_vuln

   record AIR-2026-0941NVD ↗
3. 2026-01-12
   CVE-2024-58339

   CVE-2024-58339: LlamaIndex uncontrolled resource consumption in VannaQueryEngine

   2 Disclosedinfra_vuln

   record AIR-2026-0940NVD ↗
4. 2025-10-13
   CVE-2025-7707

   CVE-2025-7707: llama-index Insecure Temporary File Vulnerability

   2 Disclosedinsecure-temp-file

   record AIR-2025-0355GitHub Advisory Database ↗
5. 2025-09-27
   CVE-2025-7647

   CVE-2025-7647: llama-index-core insecurely handles temporary files

   2 Disclosedcwe-379 · insecure-temp-files

   record AIR-2025-0348GitHub Advisory Database ↗
6. 2025-08-26
   CVE-2025-5302

   CVE-2025-5302: LlamaIndex Denial of Service in JSONReader

   2 Discloseddenial-of-service

   record AIR-2025-0329GitHub Advisory Database ↗
7. 2025-07-10
   CVE-2025-6211

   CVE-2025-6211: LlamaIndex vulnerable to data loss via MD5 hash collisions

   2 Disclosedhash-collision

   record AIR-2025-0315GitHub Advisory Database ↗
8. 2025-07-07
   CVE-2025-6209

   CVE-2025-6209: LlamaIndex path traversal vulnerability in encode_image

   2 Disclosedpath-traversal

   record AIR-2025-0312GitHub Advisory Database ↗
9. 2025-07-07
   CVE-2025-3108

   LlamaIndex vulnerable to remote code execution in JsonPickleSerializer

   2 Disclosedrce · deserialization

   record AIR-2025-0311GitHub Advisory Database ↗
10. 2025-07-07
    CVE-2025-5472

    LlamaIndex vulnerable to DoS through recursive JSON parsing

    2 Disclosedstack-overflow · denial-of-service

    record AIR-2025-0309GitHub Advisory Database ↗
11. 2025-06-05
    CVE-2025-1793

    CVE-2025-1793: LlamaIndex SQL Injection Vulnerability

    2 Disclosedllamaindex · sql-injection

    record AIR-2025-0295GitHub Advisory Database ↗
12. 2025-05-10
    CVE-2025-1752

    CVE-2025-1752: LlamaIndex Vulnerable to Denial of Service via KnowledgeBaseWebReader

    2 Disclosedllamaindex · dos

    record AIR-2025-0281GitHub Advisory Database ↗
13. 2025-03-20
    CVE-2024-12911

    CVE-2024-12911: LlamaIndex Prompt Injection and SQL Injection Flaw

    2 Disclosedllamaindex · prompt-injection · sql-injection

    record AIR-2025-0253GitHub Advisory Database ↗
14. 2025-03-20
    CVE-2024-12910

    CVE-2024-12910: LlamaIndex Uncontrolled Resource Consumption

    2 Discloseddenial-of-service · recursion

    record AIR-2025-0242GitHub Advisory Database ↗
15. 2025-03-20
    CVE-2024-12704

    CVE-2024-12704: LlamaIndex denial of service vulnerability

    2 Discloseddenial-of-service

    record AIR-2025-0214GitHub Advisory Database ↗
16. 2024-08-22
    CVE-2024-45201

    CVE-2024-45201: LlamaIndex dynamic import execution vulnerability

    2 Disclosedrce · llamaindex

    record AIR-2024-0161GitHub Advisory Database ↗
17. 2024-05-16
    CVE-2024-4181

    CVE-2024-4181: LlamaIndex RunGptLLM Command Injection

    2 Disclosedrce · command-injection

    record AIR-2024-0109GitHub Advisory Database ↗
18. 2024-04-16
    CVE-2024-3271

    CVE-2024-3271: LlamaIndex command injection vulnerability

    2 Disclosedcommand-injection · llamaindex

    record AIR-2024-0094GitHub Advisory Database ↗
19. 2024-04-10
    CVE-2024-3098

    Llama Index Core Prompt Injection Leading to Code Execution

    2 Disclosedprompt_injection · rce

    record AIR-2024-0085GitHub Advisory Database ↗
20. 2024-01-22
    CVE-2024-23751

    CVE-2024-23751: SQL injection vulnerability in LlamaIndex

    2 Disclosedsql-injection

    record AIR-2024-0067GitHub Advisory Database ↗
21. 2023-08-15
    CVE-2023-39662

    CVE-2023-39662: llama-index vulnerable to arbitrary code execution

    2 Disclosedrce

    record AIR-2023-0059GitHub Advisory Database ↗

Other incidents: research and unexploited reports · 1

1. 2026-03-31
   RCE Vulnerabilities in LLM-Integrated Applications via Prompt Injection

   1 Researchrce · frameworks · prompt-injection

   record AIR-2026-0350MITRE ATLAS ↗