PyPI/llama-index-cli CVE-2025-1753: high 7.8, EPSS 1.14%
LLama-Index CLI OS command injection vulnerability
Action: Upgrade llama-index-cli to 0.4.1 or later.
pip install llama-index-cli==0.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.1 | - |
Fixed versions
| 0.4.1 |
Sources
- osv: GHSA-g99h-56mw-8263
- https://nvd.nist.gov/vuln/detail/CVE-2025-1753
- https://github.com/run-llama/llama_index/commit/b57e76738c53ca82d88658b82f2d82d1c7839c7d
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/19e1c67e-1d77-451d-b10b-acbe99900b22
CVE-2025-1753 · published · modified · JSON