CVE-2025-1752 Denial of Service in run-llama/llama_index
An attacker can crash the Python process by exhausting the recursion limit in the KnowledgeBaseWebReader class of the llama_index library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-1752?
CVE-2025-1752 is a high-severity denial of service vulnerability in run-llama/llama_index, published on 10 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process.
Weakness: CWE-674
Which versions are affected by CVE-2025-1752?
3 open source packages ship an affected version, including llama-index. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
llama-index PyPI | From 0.12.15 | 0.12.21 |
llama-index PyPI | From 0.12.15 | 0.12.21 |
llama-index PyPI | From 0.12.15 | 0.12.21 |
Products include Llamaindex Llamaindex.
How do I fix CVE-2025-1752?
Upgrade llama-index to 0.12.21 or later.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-1752 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-1752 exists.
Other vulnerabilities in run-llama/llama_index
Sources
Also known as GHSA-7c85-87cp-mr6g, PYSEC-2026-1554.