CVE-2025-7707

The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific one, making it susceptible to local data tampering and denial of service.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/run-llama/llama_index/commit/98816394d57c7f53f847ed7b60725e69d0e7aae4	Patch
https://huntr.com/bounties/3fe2c8ab-6727-4aef-a0ef-4d2818e48803	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:llamaindex:llamaindex:*:*:*:*:*:*:*:*

History

08 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) La biblioteca llama_index versión 0.12.33 establece el directorio de datos de NLTK en un subdirectorio de la base de código por defecto, el cual es de escritura global en entornos multiusuario. Esta configuración permite a los usuarios locales sobrescribir, eliminar o corromper archivos de datos de NLTK, lo que lleva a una potencial denegación de servicio, manipulación de datos o escalada de privilegios. La vulnerabilidad surge del uso de un directorio de caché compartido en lugar de uno específico del usuario, lo que lo hace susceptible a la manipulación local de datos y a la denegación de servicio.

Information

Published : 2025-10-13 17:15

Updated : 2026-10-08 12:10

NVD link : CVE-2025-7707

Mitre link : CVE-2025-7707

CVE.ORG link : CVE-2025-7707

JSON object : View

Products Affected

llamaindex

llamaindex

CWE

CWE-377

Insecure Temporary File

{"id": "CVE-2025-7707", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7707", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-14T14:32:21.586813Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 1.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "security@huntr.dev", "affectedData": [{"vendor": "run-llama", "product": "run-llama/llama_index", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "v0.13.0", "versionType": "custom"}]}]}], "published": "2025-10-13T17:15:35.243", "references": [{"url": "https://github.com/run-llama/llama_index/commit/98816394d57c7f53f847ed7b60725e69d0e7aae4", "tags": ["Patch"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/3fe2c8ab-6727-4aef-a0ef-4d2818e48803", "tags": ["Exploit", "Third Party Advisory"], "source": "security@huntr.dev"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-377"}]}], "descriptions": [{"lang": "en", "value": "The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific one, making it susceptible to local data tampering and denial of service."}, {"lang": "es", "value": "La biblioteca llama_index versi\u00f3n 0.12.33 establece el directorio de datos de NLTK en un subdirectorio de la base de c\u00f3digo por defecto, el cual es de escritura global en entornos multiusuario. Esta configuraci\u00f3n permite a los usuarios locales sobrescribir, eliminar o corromper archivos de datos de NLTK, lo que lleva a una potencial denegaci\u00f3n de servicio, manipulaci\u00f3n de datos o escalada de privilegios. La vulnerabilidad surge del uso de un directorio de cach\u00e9 compartido en lugar de uno espec\u00edfico del usuario, lo que lo hace susceptible a la manipulaci\u00f3n local de datos y a la denegaci\u00f3n de servicio."}], "lastModified": "2026-10-08T12:10:00.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:llamaindex:llamaindex:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E50CA64-C1AF-4698-B880-86C7E050F4CB", "versionEndExcluding": "0.13.0", "versionStartIncluding": "0.12.33"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}