Headline
GHSA-cr7q-2w66-hjcm: llama-index-core insecurely handles temporary files
The llama-index-core package, up to version 0.12.44, contains a vulnerability in the get_cache_dir() function where a predictable, hardcoded directory path /tmp/llama_index is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions.
- GitHub Advisory Database
- GitHub Reviewed
- CVE-2025-7647
llama-index-core insecurely handles temporary files
High severity GitHub Reviewed Published Sep 27, 2025 to the GitHub Advisory Database • Updated Sep 29, 2025
Package
pip llama-index-core (pip)
Affected versions
< 0.13.0
The llama-index-core package, up to version 0.12.44, contains a vulnerability in the get_cache_dir() function where a predictable, hardcoded directory path /tmp/llama_index is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions.
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-7647
- run-llama/llama_index@9881639
- https://huntr.com/bounties/a2baa08f-98bf-47a8-ac83-06f7411afd9e
Published to the GitHub Advisory Database
Sep 27, 2025
Last updated
Sep 29, 2025