Lucene search
+L

34 matches found

osv_pysec
osv_pysec
•added 2026/07/07 4:02 p.m.•25 views

PYSEC-2026-1567 LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, before version 0.5.2 specifically in version 0.12.27 of llama-index, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as...

6.2CVSS6.4AI score0.00334EPSS
SaveExploits1References6
Rows per page
Query Builder