CVE-2026-77364
obsidian-tc
- Severity
- Medium
- Published
- October 12, 2026
- Last modified
- October 16, 2026
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash control directories are excluded only during enumeration. An authenticated caller can directly read sensitive files such as .obsidian/plugins/*/data.json, potentially exposing plugin API keys, Obsidian Sync passwords, and other in-vault data. Version 1.3.1 fixes the vulnerability by denying the control directories by default and enforcing strictReadDefault on direct request paths.
CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
References
Listed in
More obsidian-tc CVEs
Bridge tools do not consistently apply the read access-control list (ACL) to every returned field.
Read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path.
Tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web Token (JWT) has no vault claim, and the folder access-control list is shared globally.
The Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection.