5.3

CVSS Score

3.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-6208

CVE-2025-6208: Uncontrolled Memory Consumption in run-llama/llama_index

The SimpleDirectoryReader component in llama_index.core version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises because the user-specified file limit (num_files_limit) is applied after all files in a directory are loaded into memory. This can lead to memory exhaustion and degraded performance, particularly in environments with limited resources. The issue is resolved in version 0.12.41.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-6208

CVE-2025-6208:

5.3

CVSS Score

3.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
llama-index-core	pip	< 0.12.41	0.12.41

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the SimpleDirectoryReader class, specifically within the _add_files method. The description of the vulnerability states that the file limit is applied after all files in a directory are loaded into memory. The provided commit patch confirms this. The patch modifies the _add_files method in llama-index-core/llama_index/core/readers/file/base.py. Previously, the method used self.fs.glob to get a list of all files and then sliced the list to apply the num_files_limit. This is inefficient and causes the described memory issue. The fix replaces this logic with self.fs.walk and a counter to stop adding files once the limit is reached, effectively applying the limit during the file discovery process rather than after. Therefore, the SimpleDirectoryReader._add_files function is the precise location of the vulnerability, and it would appear in a runtime profile when the vulnerability is triggered by instantiating SimpleDirectoryReader with a path to a directory containing a large number of files.

Vulnerable functions

SimpleDirectoryReader._add_files

llama-index-core/llama_index/core/readers/file/base.py

The `_add_files` method in the `SimpleDirectoryReader` class was responsible for loading files from a directory. In the vulnerable version, it would first use `fs.glob` to list all files in the directory, loading all file paths into memory. The `num_files_limit` was only applied after this potentially large list of files was created. This could lead to excessive memory consumption if the directory contained a large number of files. The patch fixes this by using `fs.walk` and applying the limit during the file traversal, thus avoiding loading all file paths into memory at once.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.