CVE-2025-6210: Path Traversal Vulnerability in llama-index-readers-obsidian
Summary
CVE-2025-6210: LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit. Affects llama-index-readers-obsidian versions < 0.5.2. Fixed in 0.5.2. How to fix ↓
Also tracked for
- llama-index · PyPI
The same CVE-2025-6210 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The llama-index-readers-obsidian package is part of the run-llama project, designed to facilitate the reading and processing of data within the Obsidian note-taking application. It provides users with tools to manage and access their notes efficiently. However, a critical vulnerability has been identified in the ObsidianReader class, which can lead to serious security risks if not addressed promptly.
Vulnerability Detail
A vulnerability exists in the ObsidianReader class of the llama-index-readers-obsidian package, specifically in versions prior to 0.5.2. This flaw allows for hardlink-based path traversal, enabling attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd. The issue arises from inadequate handling of hardlinks in the load_data() method, where security checks fail to differentiate between real files and hardlinks. This vulnerability poses a moderate risk, with a CVSS score of 6.2.
How To Fix
Minimum fixed version
0.5.2
This is the first release that contains the fix.
pip install --upgrade "llama-index-readers-obsidian==0.5.2"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the load_data() method with untrusted input until the package is updated. Ensure that your application does not process files from untrusted sources.
Conclusion
The CVE-2025-6210 vulnerability in the llama-index-readers-obsidian package poses a significant risk due to its potential for path traversal attacks. Users are strongly encouraged to update to version 0.5.2 or later to mitigate this risk. Additionally, utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for llama-index-readers-obsidian →
FAQ
The vulnerability allows for path traversal via hardlinks, enabling unauthorized access to sensitive files.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
If exploited, attackers could gain access to sensitive system files, leading to data breaches and potential system compromise.
Yes, the vulnerability is fixed in version 0.5.2 of the llama-index-readers-obsidian package.
As a temporary measure, avoid using the load_data() method with untrusted input until you can update to the patched version.
Related vulnerabilities
Recent vulnerabilities recorded for llama-index-readers-obsidian.
