Skip to content
OpenAdvisories

Product · Obsidian

Obsidian Desktop

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-104078

    Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass

    Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterURL to produc…

    Obsidian Obsidian Desktop
  • High 7.8
    CVE-2026-104077

    Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown

    Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by th…

    Obsidian Obsidian Desktop