PYSEC-2025-248

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/llama-index/PYSEC-2025-248.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2025-248

Aliases

Published

2025-07-07T10:15:26.900Z

Modified

2026-07-13T07:26:23.351624589Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.

References

Affected packages

PyPI / llama-index

Package

Name: llama-index; View open source insights on deps.dev
Purl: pkg:pypi/llama-index

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0.12.23

Fixed

0.12.28

Affected versions

0.*

0.12.23

0.12.24

0.12.25

0.12.26

0.12.27

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/llama-index/PYSEC-2025-248.yaml"