High severity7.5NVD Advisory· Published Jul 7, 2025· Updated Jun 17, 2026
CVE-2025-3046
CVE-2025-3046
Description
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
llama-index-readers-obsidianPyPI | < 0.5.1 | 0.5.1 |
Affected products
2- Range: unspecified
Patches
Vulnerability mechanics
References
6- github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42envdPatchWEB
- huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5f904danvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-fmrf-6jv9-qjc7ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-3046ghsaADVISORY
- github.com/run-llama/llama_index/commit/266eb3b3a61f158112726d75a5f5f0b90e34ded0ghsaWEB
- github.com/run-llama/llama_index/pull/18320ghsaWEB
News mentions
0No linked articles in our index yet.