# CVE-2025-6210: PYSEC-2026-1567 - LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

Source: https://junglewise.ai/threats/cve-2025-6210-llamaindex-obsidianreader-path-traversal-via-hardlinks  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-07. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2025-6210 · Severity: low · CVSS 3 · Published 2026-07-07

LlamaIndex is a popular Python library for building applications that work with large language models. The ObsidianReader component, used to load data from Obsidian vault files, contains a security flaw that allows attackers to bypass file access restrictions and read sensitive system files by exploiting hardlinks. This could expose confidential data such as passwords or configuration files on affected systems.

Technologies: [llama-index (PyPI)](https://junglewise.ai/threats/technologies/llama-index). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2025-6210 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-6210 being exploited in the wild.

**How severe is CVE-2025-6210?** Low severity, with a CVSS score of 3, published 7 July 2026.

**Which products and versions are affected?** llama-index (PyPI) ECOSYSTEM:introduced=0,fixed=0.5.2; llama-index-readers-obsidian (PyPI) ECOSYSTEM:introduced=0,fixed=0.5.2.

**Is there a fix for CVE-2025-6210?** Yes. llama-index (PyPI): upgrade to 0.5.2 or later; llama-index-readers-obsidian (PyPI): upgrade to 0.5.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-6210 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2025-6210?** Check whether you run llama-index (PyPI) or llama-index-readers-obsidian (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- llama-index (PyPI): upgrade to 0.5.2 or later

  ```sh
  pip install "llama-index>=0.5.2"
  ```

- llama-index-readers-obsidian (PyPI): upgrade to 0.5.2 or later

  ```sh
  pip install "llama-index-readers-obsidian>=0.5.2"
  ```


## Technical details

The vulnerability is a path traversal flaw (CWE-22) in the ObsidianReader class's load_data() method, specifically affecting llama-index versions before 0.5.2 (including 0.12.27). The root cause is inadequate handling of hardlinks during file validation—security checks fail to differentiate between regular files and hardlinks, allowing an attacker to craft hardlinks pointing to sensitive files outside the intended vault directory. No authentication is required; an attacker with local file system access can exploit this by creating malicious hardlinks within an Obsidian vault directory. The vulnerability is fixed in llama-index-readers-obsidian version 0.5.2 and later.

## Affected products

- LlamaIndex llama-index-readers-obsidian before 0.5.2

## Identifiers

- CVE-2025-6210
- GHSA-3j8r-jf9w-5cmh
- PYSEC-2025-252
- PYSEC-2026-1567

## Timeline

- 2025-07-07: disclosed: Vulnerability published in GitHub Advisory Database
- 2025-07-08: patched: Fix available in llama-index-readers-obsidian 0.5.2

## References

- [https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ff](https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ff)

## Related threats

- [PYSEC-2026-2606 - LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class](https://junglewise.ai/threats/cve-2025-6211-llamaindex-vulnerable-to-data-loss-through-hash-collisions-in-its)
- [PYSEC-2026-1558 - LlamaIndex vulnerable to Path Traversal attack through its encode_image function](https://junglewise.ai/threats/cve-2025-6209-llamaindex-path-traversal-in-encode-image-function)
- [PYSEC-2026-1559 - LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing](https://junglewise.ai/threats/cve-2025-5472-llamaindex-vulnerable-to-dos-attack-through-uncontrolled-recursive)
- [PYSEC-2026-1568 - LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class](https://junglewise.ai/threats/cve-2025-3046-llamaindex-is-vulnerable-to-path-traversal-attack-through-its)
- [PYSEC-2026-1570 - LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser](https://junglewise.ai/threats/cve-2025-3225-llamaindex-has-an-xml-entity-expansion-vulnerability-in-its)