Vulnerability · Published Oct 13, 2025 · Assigned by @huntr_ai
CVE-2025-7707World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index
High 7.1
In plain English
A high-severity security flaw in run-llama/llama_index from run-llama. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific one, making it susceptible to local data tampering and denial of service.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | llama-index | 0.13.0 | GHSA-rg9h-vx28-xxp5 |
| PyPI | llama-index | 0.13.0 | PYSEC-2026-1556 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| run-llama | run-llama/llama_index | unspecified – before v0.13.0 |
Weakness: CWE-377 · Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H