CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/tmp/llama_index` is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Exploitability : 1.8 / Impact : 5.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/run-llama/llama_index/commit/98816394d57c7f53f847ed7b60725e69d0e7aae4
https://huntr.com/bounties/a2baa08f-98bf-47a8-ac83-06f7411afd9e

Configurations

No configuration.

History

09 Oct 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) El paquete llama-index-core, hasta la versión 0.12.44, contiene una vulnerabilidad en la función 'get_cache_dir()' donde se utiliza una ruta de directorio predecible y codificada de forma rígida '/tmp/llama_index' en sistemas Linux sin los controles de seguridad adecuados. Esta vulnerabilidad permite a los atacantes en sistemas multiusuario robar modelos propietarios, envenenar incrustaciones en caché o realizar ataques de symlink. El problema afecta a todas las implementaciones de Linux donde múltiples usuarios comparten el mismo sistema. La vulnerabilidad se clasifica bajo CWE-379, CWE-377 y CWE-367, indicando la creación insegura de archivos temporales y posibles condiciones de carrera.

Information

Published : 2025-09-27 17:15

Updated : 2026-10-09 10:10

NVD link : CVE-2025-7647

Mitre link : CVE-2025-7647

CVE.ORG link : CVE-2025-7647

JSON object : View

Products Affected

No product.

CWE

CWE-378

Creation of Temporary File With Insecure Permissions

{"id": "CVE-2025-7647", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7647", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-29T19:26:13.766845Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.5, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security@huntr.dev", "affectedData": [{"vendor": "run-llama", "product": "run-llama/llama_index", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "v0.13.0", "versionType": "custom"}]}]}], "published": "2025-09-27T17:15:33.833", "references": [{"url": "https://github.com/run-llama/llama_index/commit/98816394d57c7f53f847ed7b60725e69d0e7aae4", "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/a2baa08f-98bf-47a8-ac83-06f7411afd9e", "source": "security@huntr.dev"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-378"}]}], "descriptions": [{"lang": "en", "value": "The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/tmp/llama_index` is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions."}, {"lang": "es", "value": "El paquete llama-index-core, hasta la versi\u00f3n 0.12.44, contiene una vulnerabilidad en la funci\u00f3n 'get_cache_dir()' donde se utiliza una ruta de directorio predecible y codificada de forma r\u00edgida '/tmp/llama_index' en sistemas Linux sin los controles de seguridad adecuados. Esta vulnerabilidad permite a los atacantes en sistemas multiusuario robar modelos propietarios, envenenar incrustaciones en cach\u00e9 o realizar ataques de symlink. El problema afecta a todas las implementaciones de Linux donde m\u00faltiples usuarios comparten el mismo sistema. La vulnerabilidad se clasifica bajo CWE-379, CWE-377 y CWE-367, indicando la creaci\u00f3n insegura de archivos temporales y posibles condiciones de carrera."}], "lastModified": "2026-10-09T10:10:00.193", "sourceIdentifier": "security@huntr.dev"}