Vulnerability · Published Oct 12, 2026 · Assigned by GitHub_M

CVE-2026-77364obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets

Medium 6.5

In plain English

A medium-severity information exposure in obsidian-tc from The-40-Thieves. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.2%top 85.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash control directories are excluded only during enumeration. An authenticated caller can directly read sensitive files such as .obsidian/plugins/*/data.json, potentially exposing plugin API keys, Obsidian Sync passwords, and other in-vault data. Version 1.3.1 fixes the vulnerability by denying the control directories by default and enforcing strictReadDefault on direct request paths.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
npm	obsidian-tc	1.3.1	GHSA-cvp8-vvgf-69q4

Affected products (as reported)

Vendor	Product	Versions
The-40-Thieves	obsidian-tc	< 1.3.1

Weakness: CWE-200, CWE-276 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-cvp8-vvgf-69q4 x_refsource_CONFIRM
https://github.com/The-40-Thieves/obsidian-tc/pull/73 x_refsource_MISC
https://github.com/The-40-Thieves/obsidian-tc/commit/74de320ddea855e1dec47d67beabe88491149dab x_refsource_MISC
https://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.3.1 x_refsource_MISC