Skip to content
OpenAdvisories

Package · npm

obsidian-tc

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 7.1
    CVE-2026-115478

    obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `create_entity`, `link_entities`, `rename_entity`, `unlink_entities` and `delete_entity` regenerate memory notes from SQLite at the computed `me…

    The-40-Thieves obsidian-tc obsidian-tc npm
  • High 7.1
    CVE-2026-115477

    obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with `auth.jwtSecret` configured and a 2026-07-28-era client declaring `elicitation.form` support, a dispatch-g…

    The-40-Thieves obsidian-tc obsidian-tc npm
  • Medium 4.7
    CVE-2026-77361

    obsidian-tc symlink path mismatch bypasses read ACL restrictions

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allo…

    The-40-Thieves obsidian-tc obsidian-tc npm
  • Medium 4.3
    CVE-2026-77362

    obsidian-tc bridge tools expose data outside the read ACL

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes group counts derived fro…

    The-40-Thieves obsidian-tc obsidian-tc npm
  • Critical 9.9
    CVE-2026-77366

    obsidian-tc tokens can access arbitrary configured vaults

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web Token (JWT) has no vault claim, a…

    The-40-Thieves obsidian-tc obsidian-tc npm
  • Medium 6.5
    CVE-2026-77364

    obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash cont…

    The-40-Thieves obsidian-tc obsidian-tc npm
  • High 8.8
    CVE-2026-77363

    obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the documented loopback configuration …

    The-40-Thieves obsidian-tc obsidian-tc npm