Skip to content
OpenAdvisories

Vendor

bitbonsai

2 known vulnerabilities.

Products

mcpvault 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-57442

    MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested

    MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and node_modules path segments do not mat…

    bitbonsai mcpvault @bitbonsai/mcpvault npm