CVE-2025-6773
2 advisories.
PyPI/lightrag-hku CVE-2025-6773: medium 5.3
HKUDS LightRAG allows Path Traversal via function upload_to_input_dir
Action: Upgrade lightrag-hku to 1.3.8 or later.
pip install lightrag-hku==1.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.8 | - |
Fixed versions
| 1.3.8 |
Sources
- osv: GHSA-v9w6-9hq9-33ch
- https://nvd.nist.gov/vuln/detail/CVE-2025-6773
- https://github.com/HKUDS/LightRAG/issues/1692
- https://github.com/HKUDS/LightRAG/issues/1692#issuecomment-3009368235
- https://github.com/HKUDS/LightRAG/commit/60777d535b719631680bcf5d0969bdef79ca4eaf
- https://github.com/HKUDS/LightRAG
- https://vuldb.com/?ctiid.314089
- https://vuldb.com/?id.314089
- https://vuldb.com/?submit.601276
CVE-2025-6773 · published · modified · JSON
PyPI/lightrag-hku CVE-2025-6773: medium 5.3
HKUDS LightRAG allows Path Traversal via function upload_to_input_dir
Action: Upgrade lightrag-hku to 1.3.8 or later.
pip install lightrag-hku==1.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.8 | - |
Fixed versions
| 1.3.8 |
Sources
- osv: PYSEC-2026-1539
- https://nvd.nist.gov/vuln/detail/CVE-2025-6773
- https://github.com/HKUDS/LightRAG/issues/1692
- https://github.com/HKUDS/LightRAG/issues/1692#issuecomment-3009368235
- https://github.com/HKUDS/LightRAG/commit/60777d535b719631680bcf5d0969bdef79ca4eaf
- https://github.com/HKUDS/LightRAG
- https://vuldb.com/?ctiid.314089
- https://vuldb.com/?id.314089
- https://vuldb.com/?submit.601276
- https://pypi.org/project/lightrag-hku
- https://github.com/advisories/GHSA-v9w6-9hq9-33ch
CVE-2025-6773 · published · modified · JSON