LlamaIndex ist anfällig für einen Path Traversal Angriff über seine ObsidianReader Klasse

The vulnerability lies in the ObsidianReader's handling of symbolic links. An attacker can create a symbolic link within the Obsidian vault directory that points to a file outside of the vault. When llama-index-readers-obsidian processes this symbolic link as a Markdown file, it will inadvertently read the target file, regardless of its location. This could expose sensitive data such as configuration files, database backups, or other confidential information stored on the system. The blast radius extends to any data accessible by the user running the llama-index-readers-obsidian component.

Organizations and developers using llama-index-readers-obsidian for integrating Obsidian vaults with LlamaIndex applications are at risk. This includes those deploying LlamaIndex in environments where sensitive data is stored within Obsidian vaults, particularly if the application runs with elevated privileges or has access to the broader file system.

• python / supply-chain:

import os
import subprocess

def check_llama_index_version():
    try:
        result = subprocess.check_output(['pip', 'show', 'llama-index-readers-obsidian'], stderr=subprocess.STDOUT, text=True)
        version = next(line.split(':')[-1].strip() for line in result.splitlines() if 'Version:' in line)
        print(f"llama-index-readers-obsidian version: {version}")
        if version <= '0.5.0':
            print("VULNERABLE: Upgrade required.")
        else:
            print("Not vulnerable.")
    except FileNotFoundError:
        print("llama-index-readers-obsidian not installed.")

check_llama_index_version()

• generic web: Check for unusual file access patterns in Obsidian vault logs. Look for requests attempting to access files outside the expected directory structure.

1. 2025-07-07Disclosure

   disclosure

1. Reserviert2025-03-31
2. Veröffentlicht2025-07-07
3. Geändert2025-07-08
4. EPSS aktualisiert2026-03-23

The primary mitigation is to upgrade to llama-index-readers-obsidian version 0.5.1 or later, which includes the fix for this vulnerability. If upgrading is not immediately feasible, consider implementing a temporary workaround by restricting the permissions of the user running the component to prevent them from creating symbolic links within the Obsidian vault directory. Additionally, carefully review any files processed by llama-index-readers-obsidian to ensure they are legitimate Markdown files and do not contain unexpected symbolic links. After upgrading, confirm the fix by attempting to create a symbolic link outside the vault and verifying that llama-index-readers-obsidian no longer reads the linked file.