Skip to main content

Threats Tagged 'cve-2025-7647'

View all threats tagged with 'cve-2025-7647'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2025-7647

Threats Tagged 'cve-2025-7647'

Click on any threat for detailed analysis and mitigation recommendations

Red Hat Ansible Automation Platform 2.5 container release includes multiple security fixes addressing vulnerabilities such as an XML External Entity (XXE) issue in langchain-text-splitters, insecure temporary file handling in run-llama/llama_index, potential partial directory traversal via archive extraction, and potential SQL injection in Django QuerySet methods on MySQL and MariaDB. These vulnerabilities affect the container components of the platform and have been addressed in an updated release. Additional bug fixes improve installation stability and API data gathering.

Join the discussion

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/tmp/llama_index` is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Tag: cve-2025-7647
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses