affected published on 1 Nov 2025 CVE-2025-10854 8.1 HIGH CVSS version: 3.1 Attack vector (AV): NETWORK Attack complexity (AC): HIGH Privileges required (PR): NONE User interaction (UI): NONE Scope (S): UNCHANGED Confidentiality impact (C): HIGH Integrity impact (I): HIGH Availability impact (A): HIGH updated 2 months, 2 weeks ago by @LeSuisse Activity log Created automatic suggestion 3 months, 3 weeks ago @LeSuisse removed 2 packages python312Packages.llama-index-readers-txtai python313Packages.llama-index-readers-txtai 2 months, 2 weeks ago @LeSuisse accepted as draft 2 months, 2 weeks ago @LeSuisse published on GitHub 2 months, 2 weeks ago Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerabilities by ensuring safe filenames, it does not account for symbolic links within the tar file. An attacker is able to write a file anywhere in the filesystem when txtai is used to load untrusted embedding indices Affected products txtai =<9.0.0 Matching in nixpkgs pkgs.python312Packages.txtai Semantic search and workflows powered by language models nixos-unstable 9.0.0 nixpkgs-unstable 9.0.0 nixos-unstable-small 9.0.0 nixos-25.05 8.2.0 nixos-25.05-small 8.2.0 nixpkgs-25.05-darwin 8.2.0 pkgs.python313Packages.txtai Semantic search and workflows powered by language models nixos-unstable 9.0.0 nixpkgs-unstable 9.0.0 nixos-unstable-small 9.0.0 nixos-25.05 8.2.0 nixos-25.05-small 8.2.0 nixpkgs-25.05-darwin 8.2.0 Package maintainers: 1 @happysalada Raphael Megzari <raphael@megzari.com>
CVE-2025-10854 8.1 HIGH CVSS version: 3.1 Attack vector (AV): NETWORK Attack complexity (AC): HIGH Privileges required (PR): NONE User interaction (UI): NONE Scope (S): UNCHANGED Confidentiality impact (C): HIGH Integrity impact (I): HIGH Availability impact (A): HIGH updated 2 months, 2 weeks ago by @LeSuisse Activity log Created automatic suggestion 3 months, 3 weeks ago @LeSuisse removed 2 packages python312Packages.llama-index-readers-txtai python313Packages.llama-index-readers-txtai 2 months, 2 weeks ago @LeSuisse accepted as draft 2 months, 2 weeks ago @LeSuisse published on GitHub 2 months, 2 weeks ago Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is intended to prevent path traversal vulnerabilities by ensuring safe filenames, it does not account for symbolic links within the tar file. An attacker is able to write a file anywhere in the filesystem when txtai is used to load untrusted embedding indices Affected products txtai =<9.0.0 Matching in nixpkgs pkgs.python312Packages.txtai Semantic search and workflows powered by language models nixos-unstable 9.0.0 nixpkgs-unstable 9.0.0 nixos-unstable-small 9.0.0 nixos-25.05 8.2.0 nixos-25.05-small 8.2.0 nixpkgs-25.05-darwin 8.2.0 pkgs.python313Packages.txtai Semantic search and workflows powered by language models nixos-unstable 9.0.0 nixpkgs-unstable 9.0.0 nixos-unstable-small 9.0.0 nixos-25.05 8.2.0 nixos-25.05-small 8.2.0 nixpkgs-25.05-darwin 8.2.0 Package maintainers: 1 @happysalada Raphael Megzari <raphael@megzari.com>
pkgs.python312Packages.txtai Semantic search and workflows powered by language models nixos-unstable 9.0.0 nixpkgs-unstable 9.0.0 nixos-unstable-small 9.0.0 nixos-25.05 8.2.0 nixos-25.05-small 8.2.0 nixpkgs-25.05-darwin 8.2.0
pkgs.python313Packages.txtai Semantic search and workflows powered by language models nixos-unstable 9.0.0 nixpkgs-unstable 9.0.0 nixos-unstable-small 9.0.0 nixos-25.05 8.2.0 nixos-25.05-small 8.2.0 nixpkgs-25.05-darwin 8.2.0