https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:58:50.208109+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341647 EUVD-2026-341647 2026-10-06T15:58:50.210880+00:00 EUVD-2026-341647 https://cve.radiocsirt.org/vuln/fkie_cve-2024-14021 fkie_cve-2024-14021 2026-10-06T15:58:50.210912+00:00

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir without validation. An attacker who can provide a crafted persist directory containing a malicious pickle file can trigger arbitrary code execution when the victim loads the index from disk.

 https://cve.radiocsirt.org/vuln/ghsa-m592-cr2f-4qg5 GHSA-m592-cr2f-4qg5 2026-10-06T15:58:50.210951+00:00

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir without validation. An attacker who can provide a crafted persist directory containing a malicious pickle file can trigger arbitrary code execution when the victim loads the index from disk.

 https://cve.radiocsirt.org/vuln/pysec-2026-85 PYSEC-2026-85 2026-10-06T15:58:50.210970+00:00

Affected: PyPI: llama-index

LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir without validation. An attacker who can provide a crafted persist directory containing a malicious pickle file can trigger arbitrary code execution when the victim loads the index from disk.