CVE-2025-6210
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A vulnerability in the ObsidianReader class of run-llama/llama_index version 0.12.27 allows hardlink-based path traversal. Attackers can bypass path restrictions and access sensitive system files such as /etc/passwd by exploiting hardlinks; the flaw stems from inadequate hardlink handling in the load_data() method. The issue is resolved in version 0.5.2.
Risk Assessment
An attacker may read sensitive system files accessible to the application process, potentially exposing credentials and configuration data.
Recommendation
Update llama_index to version 0.5.2 or later and restrict the application process permissions to the minimum necessary.
Other vulnerabilities in llama_index
See all- CVE-2023-39662Critical
Versions of llama_index up to 0.7.13 contain a vulnerability that allows a remote attacker to execute arbitrary code via the `exec` parameter in the PandasQueryEngine function.
- CVE-2025-7707High
The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from using a shared cache directory instead of a user-specific one.
Original NVD description (English source)
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS