CVE-2025-6210: PYSEC-2026-1567 - LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

CVE-2025-6210 · Severity: low · CVSS 3 · Published 2026-07-07

LlamaIndex is a popular Python library for building applications that work with large language models. The ObsidianReader component, used to load data from Obsidian vault files, contains a security flaw that allows attackers to bypass file access restrictions and read sensitive system files by exploiting hardlinks. This could expose confidential data such as passwords or configuration files on affected systems.

Technologies: llama-index (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2025-6210 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-6210 being exploited in the wild.
How severe is CVE-2025-6210?
Low severity, with a CVSS score of 3, published 7 July 2026.
Which products and versions are affected?
llama-index (PyPI) ECOSYSTEM:introduced=0,fixed=0.5.2; llama-index-readers-obsidian (PyPI) ECOSYSTEM:introduced=0,fixed=0.5.2.
Is there a fix for CVE-2025-6210?
Yes. llama-index (PyPI): upgrade to 0.5.2 or later; llama-index-readers-obsidian (PyPI): upgrade to 0.5.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-6210 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2025-6210?
Check whether you run llama-index (PyPI) or llama-index-readers-obsidian (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • llama-index (PyPI): upgrade to 0.5.2 or later
    pip install "llama-index>=0.5.2"
  • llama-index-readers-obsidian (PyPI): upgrade to 0.5.2 or later
    pip install "llama-index-readers-obsidian>=0.5.2"

Technical details

The vulnerability is a path traversal flaw (CWE-22) in the ObsidianReader class's load_data() method, specifically affecting llama-index versions before 0.5.2 (including 0.12.27). The root cause is inadequate handling of hardlinks during file validation—security checks fail to differentiate between regular files and hardlinks, allowing an attacker to craft hardlinks pointing to sensitive files outside the intended vault directory. No authentication is required; an attacker with local file system access can exploit this by creating malicious hardlinks within an Obsidian vault directory. The vulnerability is fixed in llama-index-readers-obsidian version 0.5.2 and later.

Affected products

  • LlamaIndex llama-index-readers-obsidian before 0.5.2

Identifiers

  • CVE-2025-6210
  • GHSA-3j8r-jf9w-5cmh
  • PYSEC-2025-252
  • PYSEC-2026-1567

Timeline

  • 2025-07-07: disclosed: Vulnerability published in GitHub Advisory Database
  • 2025-07-08: patched: Fix available in llama-index-readers-obsidian 0.5.2

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.