llama_index ObsidianReader Hardlink-Based Path Traversal (CVE-2023-4210)

Critical Vulnerability Information Vulnerability Overview Vulnerability Name: Hardlink-Based Path Traversal in ObsidianReader in run-llama/llama_index CVE ID: CVE-2023-4210 Report Date: May 2, 2023 Status: Fixed Affected Component File: llama_index/readers/obsidian_reader.py Class: ObsidianReader Method: load_data Root Cause Analysis Issue Description: The ObsidianReader class is designed to restrict access to files within a given vault. However, attackers can bypass the path restriction mechanism by using hard links, enabling unauthorized access to sensitive system files (e.g., /etc/passwd). Path Resolution: Uses and to convert relative paths to absolute paths. Directory Boundary Check: Uses to ensure all paths remain within the vault. Exploitation Steps 1. Create a hard link pointing to a system file. 2. Execute PoC code to read the content of the hard link. Recommended Fix Implement hard link detection before processing files. Check file inode consistency to ensure only local files within the vault directory are processed. Impact Unauthorized Access to System Files: Attackers can bypass restrictions via hard links to access sensitive files. Cloud Infrastructure Risk: In cloud environments, this may lead to data leakage or exposure of critical information. Local Data Leakage: Malicious hard links can result in sensitive data exposure. Silent Exploitation: Attackers can read files without requiring privilege escalation or user interaction. Report and Fix Details Discoverer: Manan Patel Fixer: Cicle (Astra) Barrial Disclosure Bounty: $71.35

Goal Reached Thanks to every supporter — we hit 100%!

llama_index ObsidianReader Hardlink-Based Path Traversal (CVE-2023-4210)