Arbitrary File Read Vulnerability in run-llama's ObsidianReader Class
CVE-2025-3046

7.5HIGH

Key Information:

Vendor

Run-llama

Status
Run-llama/llama Index
Vendor
CVE Published:
7 July 2025

What is CVE-2025-3046?

The ObsidianReader class in run-llama's llama_index repository contains a vulnerability that enables arbitrary file reading through the manipulation of symbolic links. This flaw occurs because the ObsidianReader does not properly resolve symlinks to their actual file paths and fails to ensure that these paths are confined to the expected directory. As a result, attackers can exploit this weakness to create symlinks that point to files located outside the designated vault directory, allowing them to process confidential data as if they were legitimate Markdown files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

run-llama/llama_index < 0.12.28

References

https://huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5...
https://github.com/run-llama/llama_index/commit/0008041e8...

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.