CVE-2025-6210 Hardlink-Based Path Traversal in run-llama/llama_index
Attackers can bypass path restrictions to read sensitive system files via hardlinks in the ObsidianReader class of the llama_index library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-6210?
CVE-2025-6210 is a medium-severity path traversal vulnerability in run-llama/llama_index, published on 7 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2.
Weakness: CWE-22
Which versions are affected by CVE-2025-6210?
4 open source packages ship an affected version, including llama-index-readers-obsidian and llama-index. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
llama-index-readers-obsidian PyPI | All versions | 0.5.2 |
llama-index-readers-obsidian PyPI | All versions | 0.5.2 |
llama-index-readers-obsidian PyPI | All versions | 0.5.2 |
llama-index PyPI | All versions | 0.5.2 |
Products include Llamaindex Llamaindex.
How do I fix CVE-2025-6210?
Upgrade llama-index-readers-obsidian to 0.5.2 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-6210 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-6210 exists.
Other vulnerabilities in run-llama/llama_index
Sources
Also known as GHSA-3j8r-jf9w-5cmh, PYSEC-2025-252, PYSEC-2026-1567.