Read the docs
TI-2026-71798 Aliases CVE-2026-77362GHSA-43r2-c7g8-prc8

Missing read ACL checks in obsidian-tc expose note data

Priority LOW 19CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure, Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-200 and CWE-863.

Summary

obsidian-tc, a Model Context Protocol server for Obsidian vaults, is affected before 1.3.1. Its bridge tools do not consistently apply the read access-control list to every returned field, which exposes information (CWE-200, CWE-863). An authenticated remote attacker with low privileges can infer or read data from notes outside their read ACL.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

Description from the CNA

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) to every returned field. The tasks_filter tool exposes group counts derived from denied notes, makemd_query passes unfiltered sibling result fields through, and list_templates exposes template paths and parsed user-function bodies without a read-whitelist check. An authenticated caller can consequently infer or read data from notes outside the caller's read ACL. Version 1.3.1 fixes the vulnerability by filtering path-attributable fields and applying the read whitelist to list_templates.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.002 9th percentileScored 2026-11-07
Fix Fixed obsidian-tc (The-40-Thieves): 1.3.1obsidian-tc (npm): 1.3.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
The-40-Thievesobsidian-tcbefore 1.3.11.3.1Patch availableCNA
—obsidian-tc (npm)before 1.3.11.3.1Patch availableGHSA-43r2-c7g8-prc8
  • obsidian-tc VendorThe-40-Thieves Affected before 1.3.1 Fixed in 1.3.1 Patch available CNA
  • obsidian-tc (npm) Vendor— Affected before 1.3.1 Fixed in 1.3.1 Patch available GHSA-43r2-c7g8-prc8

Remediation

Upgrade the npm package obsidian-tc to version 1.3.1, which filters path-attributable fields and applies the read whitelist to list_templates. The sources list no fixed version for obsidian-tc from The-40-Thieves.

Written with Claude Haiku 5.5 from the sources below · 2026-10-27

  • Fix · CNA obsidian-tc (The-40-Thieves) Fixed in 1.3.1
  • Fix · GHSA-43r2-c7g8-prc8 obsidian-tc (npm) Fixed in 1.3.1 Advisory →

Timeline

  1. 2026-10-13 Threatist record created from CVE-2026-77362
  2. 2026-10-23 Alias added: GHSA-43r2-c7g8-prc8
  3. 2026-10-23 Fix available: npm/[email protected] · GHSA-43r2-c7g8-prc8
  4. 2026-10-23 CVSS score added · GHSA-43r2-c7g8-prc8
  5. 2026-10-23 Weakness changed · GHSA-43r2-c7g8-prc8
  6. 2026-10-23 6 new references · GHSA-43r2-c7g8-prc8

References

Advisory 1

Other 5

  • TI-2026-79945 Declined confirmations in obsidian-tc permit destructive tool calls CVSS 4.0HIGH 7.1
  • TI-2026-71222 Authorization bypass in obsidian-tc lets tokens access other vaults CVSS 3.1CRITICAL 9.9
  • TI-2026-71220 Missing origin checks in obsidian-tc expose local vault to web pages CVSS 3.1HIGH 8.8
  • TI-2026-79946 Memory tools in obsidian-tc overwrite unowned notes on disk CVSS 4.0HIGH 7.1
  • TI-2026-71221 Default ACL in obsidian-tc exposes Obsidian control-directory secrets CVSS 3.1MEDIUM 6.5
  • TI-2026-71748 Symlink path mismatch in obsidian-tc bypasses read ACL restrictions CVSS 3.1MEDIUM 4.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences