Vulnerability · Published Sep 22, 2025 · Assigned by JFROG
CVE-2025-10854Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices
High 8.1
In plain English
A high-severity security flaw in txtai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.5%top 60.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerabilities by ensuring safe filenames, it does not account for symbolic links within the tar file. An attacker is able to write a file anywhere in the filesystem when txtai is used to load untrusted embedding indices
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| txtai | 0 – through 9.0.0 |
Weakness: CWE-61 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H