LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service (DoS) by submitting deeply nested JSON structures, leading to a RecursionError and crashing applications. The root cause is the unsafe recursive traversal design and lack of depth validation, which makes the JSONReader susceptible to stack overflow when processing deeply nested JSON. This impacts the availability of services, making them unreliable and disrupting workflows. The issue is resolved in version 0.12.38.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| Python (PyPI) | llama-index | >= 0.12.28, < 0.12.38 | 0.12.38 |
| Python (PyPI) | llama-index-core | < 0.12.38 | 0.12.38 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-5472
- https://github.com/run-llama/llama_index/commit/c032843a02ce38fd8f284b2aa5a37fd1c17ae635
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/df187bda-7911-4823-a19a-e15b2c66b0d4
- https://pypi.org/project/llama-index-core
- https://github.com/advisories/GHSA-3wxx-q3gv-pvvv
- CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H- Weakness (CWE)
CWE-674- Platform
- Python (PyPI)
- Package
llama-index, llama-index-core- Disclosed
- 07.07.2025
- Updated
- 11.10.2026 14:17
Sources and licenses
OSV / GitHub Advisory Database - PYSEC-2025-251 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-3wxx-q3gv-pvvv - CC BY 4.0
OSV / GitHub Advisory Database - PYSEC-2026-1559 - PyPA Advisory Database; CC BY 4.0
Vulnerability history: llama-index-core
All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 10
- First → latest
- 04.2024 02.2026
- Without a fix
- 0
- Exploited in attacks
- 0
Severity breakdown
- Critical 3
- High 4
- Medium 3
Disclosures per year
- 2024: 3
- 2025: 6
- 2026: 1
-
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.