Known Vulnerabilities for Obsidian-tc by The-40-Thieves
Listed below are 10 of the newest known vulnerabilities associated with "Obsidian-tc" by "The-40-Thieves".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104078 json | Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows... | Not Provided | 2026-10-08 | 2026-10-12 |
| CVE-2026-104077 json | Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdo... | Not Provided | 2026-10-08 | 2026-10-12 |
| CVE-2026-77366 json | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does ... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-77364 json | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-77363 json | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-64636 json | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arb... | Not Provided | 2026-08-07 | 2026-08-07 |
| CVE-2026-57442 json | MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathF... | Not Provided | 2026-09-15 | 2026-09-16 |
| CVE-2026-57441 json | MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathF... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-54618 json | Obsidian Web MCP is a secure remote MCP server for Obsidian vaults. Prior to 0.2.0, /oauth/authorize issues an authorization ... | Not Provided | 2026-09-17 | 2026-09-24 |
| CVE-2026-19331 json | A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of ... | Not Provided | 2026-08-09 | 2026-08-10 |