Skip to content
OpenAdvisories

Vendor

Obsidian

3 known vulnerabilities.

Products

Obsidian Desktop 2 Obsidian 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2026-104078

    Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass

    Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterURL to produc…

    Obsidian Obsidian Desktop
  • High 7.8
    CVE-2026-104077

    Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown

    Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by th…

    Obsidian Obsidian Desktop
  • High 8.2
    CVE-2023-2110

    Obsidian Local File Disclosure

    Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/<absolute-path>". This vulnerability can be exploited if a user opens…

    Obsidian Obsidian