CVE-2025-3046
published 2025-07-07CVE-2025-3046: A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through…
PriorityP348high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
0.56%
42.1th percentile
A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| llamaindex | llamaindex | >= 0.12.23 < 0.12.28 | 0.12.28 |
| run-llama | run-llama_llama_index | >= unspecified < 0.12.28 | 0.12.28 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
osv·2025-07-07
CVE-2025-3046 [HIGH] LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
A vulnerability in the `ObsidianReader` class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llama_index repository (versions 0.12.23 to 0.12.28) allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
GHSA
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
ghsa·2025-07-07
CVE-2025-3046 [HIGH] CWE-22 LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
A vulnerability in the `ObsidianReader` class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llama_index repository (versions 0.12.23 to 0.12.28) allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
Red Hat
llama-index: Path Traversal llama_index
vendor_redhat·2025-07-07·CVSS 7.5
CVE-2025-3046 [HIGH] CWE-22 llama-index: Path Traversal llama_index
llama-index: Path Traversal llama_index
A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
A path traversal flaw has been discovered in llama_index. The `ObsidianReader` class fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. As a result an attacker who can in
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-07-07
Published