LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

高 7.5CVE-2025-3046 · GHSA-fmrf-6jv9-qjc7 · PYSEC-2025-248 · 07/07/2025 公開 · 17/06/2026 更新

要点

CVE-2025-3046 は llama-index, llama-index-readers-obsidian, llamaindex (llamaindex) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.64%（全脆弱性の 50.6% より高い）。
対処：0.12.28, 0.5.1 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
llama-index PyPI	`≥ 0.12.23, < 0.12.28`	`0.12.28`
llama-index-readers-obsidian PyPI	`< 0.5.1`	`0.5.1`
llamaindex llamaindex	`≥ 0.12.23, < 0.12.28`	`0.12.28`

概要

A vulnerability in the ObsidianReader class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llama_index repository (versions 0.12.23 to 0.12.28) allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.

NVD の説明

A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.