---
id: CVE-2025-6210
aliases:
  - GHSA-3j8r-jf9w-5cmh
  - PYSEC-2026-1567
title: >-
  LlamaIndex vulnerability in its ObsidianReader class can lead to Path
  Traversal exploit
summary: >-
  LlamaIndex vulnerability in its ObsidianReader class can lead to Path
  Traversal exploit
severity: medium
cvss: 6.2
cvssVector: 'CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
vendor: llama-index-readers-obsidian
product: llama-index-readers-obsidian
ecosystem: pip
affected:
  - llama-index-readers-obsidian < 0.5.2
patched:
  - llama-index-readers-obsidian 0.5.2
published: '2025-07-07'
updated: '2026-07-07'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/GHSA-3j8r-jf9w-5cmh'
references:
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-6210'
  - url: >-
      https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ff
  - url: 'https://github.com/run-llama/llama_index'
  - url: 'https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687'
tags:
  - osv
  - pip
epss: 0.00293
epssPercentile: 0.19421
ingestedAt: '2026-07-08T18:25:44.927Z'
---

## Overview

A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, before version 0.5.2 (specifically in version 0.12.27 of llama-index), allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in llama-index-readers-obsidian version 0.5.2.

## Affected packages

- `llama-index-readers-obsidian < 0.5.2`

## Remediation

Upgrade to a patched release:

- `llama-index-readers-obsidian 0.5.2`