LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

CAO 7.5CVE-2025-3046 · GHSA-fmrf-6jv9-qjc7 · PYSEC-2025-248 · Công bố 07/07/2025 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2025-3046 là lỗ hổng mức CAO (CVSS 7.5) ảnh hưởng llama-index, llama-index-readers-obsidian, llamaindex (llamaindex).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.64%, cao hơn 50.6% các lỗ hổng khác.
Cách xử lý: cập nhật lên 0.12.28, 0.5.1 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
llama-index PyPI	`≥ 0.12.23, < 0.12.28`	`0.12.28`
llama-index-readers-obsidian PyPI	`< 0.5.1`	`0.5.1`
llamaindex llamaindex	`≥ 0.12.23, < 0.12.28`	`0.12.28`

Mô tả

A vulnerability in the ObsidianReader class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llama_index repository (versions 0.12.23 to 0.12.28) allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.

Mô tả của NVD

A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.