CVE-2025-1752 | run-llama llama_index up to 0.3.5 KnowledgeBaseWebReader get_article_urls max_depth resource consumption

A vulnerability classified as critical was found in run-llama llama_index up to 0.3.5. Affected by this vulnerability is the function get_article_urls of the component KnowledgeBaseWebReader. The manipulation of the argument max_depth leads to resource consumption.

This vulnerability is known as CVE-2025-1752. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.