Vulnerability Description
A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Llamaindex | Llamaindex | >= 0.12.23, < 0.12.28 |
Related Weaknesses (CWE)
References
- https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bPatch
- https://huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5f904daExploitThird Party Advisory
- https://huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5f904daExploitThird Party Advisory
FAQ
What is CVE-2025-3046?
CVE-2025-3046 is a vulnerability with a CVSS score of 7.5 (HIGH). A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to...
How severe is CVE-2025-3046?
CVE-2025-3046 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-3046?
Check the references section above for vendor advisories and patch information. Affected products include: Llamaindex Llamaindex.