Vulnerabilities

TI-2026-79946 CVE-2026-115478 · GHSA-r3g7-r4hr-m258

Memory tools in obsidian-tc overwrite unowned notes on disk

LOW 31

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00323 Published 2026-10-23 Fixed in 1.31.4 CWE-459

TI-2026-79945 CVE-2026-115477 · GHSA-737x-cwfr-5vvc

MEDIUM 64

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00354 Published 2026-10-23 Fixed in 1.31.4 CWE-285

TI-2026-71748 CVE-2026-77361 · GHSA-c5xx-h28h-f682

LOW 20

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00113 Published 2026-10-13 Fixed in 1.3.1 CWE-59

TI-2026-71798 CVE-2026-77362 · GHSA-43r2-c7g8-prc8

LOW 19

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.002 Published 2026-10-13 Fixed in 1.3.1 CWE-200

TI-2026-71222 CVE-2026-77366 · GHSA-84c9-qqpq-2pq5

MEDIUM 43

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00309 Published 2026-10-12 Fixed in 1.3.1 CWE-639

TI-2026-71221 CVE-2026-77364 · GHSA-cvp8-vvgf-69q4

LOW 28

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00239 Published 2026-10-12 Fixed in 1.3.1 CWE-200

TI-2026-71220 CVE-2026-77363 · GHSA-pqh8-4pj7-32xx

LOW 39

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00155 Published 2026-10-12 Fixed in 1.3.1 CWE-1385