What is the CVSS score of CVE-2025-3225?

CVE-2025-3225 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Llamaindex are affected by CVE-2025-3225?

Organizations using version face notable risk from CVE-2025-3225 rated CVSS 7.5. Exploitation could compromise the security of affected deployments.. A patch is available.

Is there a public PoC exploit available for CVE-2025-3225?

Yes, a public proof-of-concept exploit is available for CVE-2025-3225. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-3225?

Within 7 days: Identify all affected systems running version and apply vendor patches promptly. Vendor patch is available.

Llamaindex CVE-2025-3225

EUVD-2025-20207 HIGH

Improper Restriction of Recursive Entity References in DTDs (CWE-776)

2025-07-07 security@huntr.dev

GHSA-w42r-mrx7-c633

Denial Of Service Red Hat Llamaindex

7.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.3 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 03:37 euvd

EUVD-2025-20207

Analysis Generated

Mar 16, 2026 - 03:37 vuln.today

Patch released

Mar 16, 2026 - 03:37 nvd

Patch available

PoC Detected

Jul 30, 2025 - 21:24 vuln.today

Public exploit code

CVE Published

Jul 07, 2025 - 10:15 nvd

HIGH 7.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

2 pypi packages depend on llama-index (2 direct, 0 indirect)

Ecosystem-wide dependent count for version 0.12.21.

DescriptionCVE.org

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service (DoS) by exhausting system memory and potentially causing a system crash. The issue is resolved in version v0.12.29.

Analysis

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Improper Restriction of Recursive Entity References in DTDs (CWE-776).

RemediationAI

A vendor patch is available — apply it immediately. Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.