CVE-2025-1752 - CVE House
Back to Database
Status published High CVE-2025-1752

Denial of Service in run-llama/llama_index

Vulnerability Description

A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1752

Credits & Attribution

No credits recorded in the NVD database.

References

More from run-llama

View All →
CVE-2025-7707
World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index
High 7.1
CVE-2025-7647
Insecure Temporary File Handling in run-llama/llama_index
High 7.3
CVE-2025-6211
MD5 Hash Collision in run-llama/llama_index
Medium 6.5
CVE-2025-6210
Hardlink-Based Path Traversal in run-llama/llama_index
Medium 6.2
CVE-2025-6209
Arbitrary File Read through Path Traversal in run-llama/llama_index
High 7.5

Affected Vendor

Affected Software

run-llama/llama_index
Vulnerable Versions:
unspecified

Timeline

Official Publish: May 10th, 2025
Last Modified: October 15th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-674

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.