Advisoriesby IbisLlamaIndexPYSEC-2025-252
LlamaIndex: path traversal
Fix: upgrade to 0.5.2 or later
A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| llama-index PyPI | < 0.5.2 | 0.5.2 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity from
- the CVSS score
- Also known as
- CVE-2025-6210, GHSA-3j8r-jf9w-5cmh, PYSEC-2026-1567
More LlamaIndex advisories
All LlamaIndex
LlamaIndex vulnerable to Path Traversal attack through its encode_image functionCVE-2025-6209fixed in 0.12.41LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsingCVE-2025-5472fixed in 0.12.38LlamaIndex: denial of serviceCVE-2025-3225fixed in 0.12.29A vulnerability in the ArxivReader class of the run-llama/llama_index repositoryCVE-2025-3044fixed in 0.12.28LlamaIndex: arbitrary file readCVE-2025-3046fixed in 0.12.28LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentCVE-2025-3108fixed in 0.12.41