PyPI/llama-index-readers-obsidian CVE-2025-6210: medium 6.2, EPSS 0.33%
LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit
Action: Upgrade llama-index-readers-obsidian to 0.5.2 or later.
pip install llama-index-readers-obsidian==0.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.2 | - |
Fixed versions
| 0.5.2 |
Sources
- osv: PYSEC-2026-1567
- https://nvd.nist.gov/vuln/detail/CVE-2025-6210
- https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ff
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687
- https://pypi.org/project/llama-index-readers-obsidian
- https://github.com/advisories/GHSA-3j8r-jf9w-5cmh
CVE-2025-6210 · published · modified · JSON