Arbitrary File Read Vulnerability in run-llama's ObsidianReader Class
CVE-2025-3046

7.5HIGH

Key Information:

Vendor

Run-llama

Vendor
CVE Published:
7 July 2025

What is CVE-2025-3046?

The ObsidianReader class in run-llama's llama_index repository contains a vulnerability that enables arbitrary file reading through the manipulation of symbolic links. This flaw occurs because the ObsidianReader does not properly resolve symlinks to their actual file paths and fails to ensure that these paths are confined to the expected directory. As a result, attackers can exploit this weakness to create symlinks that point to files located outside the designated vault directory, allowing them to process confidential data as if they were legitimate Markdown files.

Affected Version(s)

run-llama/llama_index < 0.12.28

References

CVSS V3.0

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-3046 : Arbitrary File Read Vulnerability in run-llama's ObsidianReader Class