CVE-2025-3046 Path Traversal via Symbolic Links in run-llama/llama_index
Attackers can read arbitrary files outside the intended directory by exploiting symbolic link handling in the ObsidianReader class of the llama_index library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-3046?
CVE-2025-3046 is a high-severity path traversal vulnerability in run-llama/llama_index, published on 7 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
Weakness: CWE-22
Which versions are affected by CVE-2025-3046?
4 open source packages ship an affected version, including llama-index-readers-obsidian and llama-index. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
llama-index-readers-obsidian PyPI | All versions | 0.5.1 |
llama-index-readers-obsidian PyPI | All versions | 0.5.1 |
llama-index-readers-obsidian PyPI | All versions | 0.5.1 |
llama-index PyPI | From 0.12.23 | 0.12.28 |
Products include Llamaindex Llamaindex.
How do I fix CVE-2025-3046?
Upgrade llama-index-readers-obsidian to 0.5.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-3046 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-3046 exists.
Other vulnerabilities in run-llama/llama_index
Sources
Also known as GHSA-fmrf-6jv9-qjc7, PYSEC-2025-248, PYSEC-2026-1568.