CVE-2025-6210
mediumpriority · track · 0EPSS 0.003 · 27 %ileEURUUSEPSS · scored 2026-10-27
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (5)
Products and version ranges known to be affected.
advisories (3)
Vendor and ecosystem advisories describing this.
- GHSA-3j8r-jf9w-5cmhLlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit2025-07-07ghsa · osvUS
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, before version 0.5.2 (specifically in version 0.12.27 of llama-index), allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in llama-index-readers-obsidian version 0.5.2.
- PYSEC-2025-2522025-07-07vendor · osvUS
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2.
- PYSEC-2026-1567LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit2026-07-07vendor · osvUS
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, before version 0.5.2 (specifically in version 0.12.27 of llama-index), allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in llama-index-readers-obsidian version 0.5.2.
also known as (9)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (8)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2025-6210cnnvd
- https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ffcnnvd
- https://github.com/run-llama/llama_index/releasesPatchcnnvd
- https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687cnnvd
- https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ffenisa_euvd
- https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687enisa_euvd
- https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ffPatchnvd
- https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687ExploitThird Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan