Arbitrary File Read Vulnerability in run-llama's ObsidianReader Class

CVE-2025-3046

What is CVE-2025-3046?

The ObsidianReader class in run-llama's llama_index repository contains a vulnerability that enables arbitrary file reading through the manipulation of symbolic links. This flaw occurs because the ObsidianReader does not properly resolve symlinks to their actual file paths and fails to ensure that these paths are confined to the expected directory. As a result, attackers can exploit this weakness to create symlinks that point to files located outside the designated vault directory, allowing them to process confidential data as if they were legitimate Markdown files.

References