{"id":"EUVD-2026-98694","enisaUuid":"96b75e74-956e-39fc-ae18-8120ce4a5cc4","description":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied folder can therefore bypass the read ACL and expose files in the denied folder. Exploitation requires an out-of-band-planted symlink and does not permit an escape from the vault root. Version 1.3.1 fixes the vulnerability by applying ACL checks to the resolved vault-relative path.","datePublished":"Oct 13, 2026, 2:00:39 PM","dateUpdated":"Oct 16, 2026, 9:58:14 PM","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-c5xx-h28h-f682\nhttps://github.com/The-40-Thieves/obsidian-tc/pull/76\nhttps://github.com/The-40-Thieves/obsidian-tc/commit/c81d1687e2cfec98a0d8bc5038c029f41ea9c920\nhttps://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.3.1\n","aliases":"CVE-2026-77361\nGHSA-c5xx-h28h-f682\n","assigner":"GitHub_M","epss":0.11,"enisaIdProduct":[{"id":"496b58ff-52a9-36d1-9184-e57621b3c3d8","product":{"name":"obsidian-tc","vendor":{"name":"The-40-Thieves"}},"product_version":"\u003c 1.3.1"}],"enisaIdVendor":[{"id":"9765512c-4114-34ce-8771-d0b398b6158d","vendor":{"name":"The-40-Thieves"}}],"enisaIdVulnerability":[{"id":"c19ca439-af8d-3ee5-9e67-f59d39b412c8","vulnerability":{"id":"GHSA-c5xx-h28h-f682","description":"obsidian-tc : Symlink read-ACL scope bypass via lexical path checks","datePublished":"Oct 23, 2026, 5:28:19 PM","dateUpdated":"Oct 23, 2026, 5:28:19 PM","baseScore":0.0,"references":"https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-c5xx-h28h-f682\nhttps://github.com/The-40-Thieves/obsidian-tc/pull/76\nhttps://github.com/The-40-Thieves/obsidian-tc/commit/c81d1687e2cfec98a0d8bc5038c029f41ea9c920\nhttps://github.com/The-40-Thieves/obsidian-tc\nhttps://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.3.1\nhttps://nvd.nist.gov/vuln/detail/cve-2026-77361\n","enisa_id":"EUVD-2026-98694\n","aliases":"GHSA-c5xx-h28h-f682\nCVE-2026-77361\n","epss":0.0,"dataProcessed":"Oct 28, 2026, 7:03:20 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"dbce69e4-9979-3fb8-8cdb-27ac2fd0ca68","vulnerability":{"id":"CVE-2026-77361","description":"obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied folder can therefore bypass the read ACL and expose files in the denied folder. Exploitation requires an out-of-band-planted symlink and does not permit an escape from the vault root. Version 1.3.1 fixes the vulnerability by applying ACL checks to the resolved vault-relative path.","datePublished":"Oct 13, 2026, 2:00:39 PM","dateUpdated":"Oct 16, 2026, 9:58:14 PM","status":"PUBLISHED","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-c5xx-h28h-f682\nhttps://github.com/The-40-Thieves/obsidian-tc/pull/76\nhttps://github.com/The-40-Thieves/obsidian-tc/commit/c81d1687e2cfec98a0d8bc5038c029f41ea9c920\nhttps://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.3.1\n","enisa_id":"EUVD-2026-98694\n","assigner":"GitHub_M","epss":0.11,"dataProcessed":"Oct 28, 2026, 7:15:15 AM","vulnerabilityProduct":[{"id":"62225884-90d2-302c-ab13-7c3442909e63","product":{"name":"obsidian-tc","vendor":{"name":"The-40-Thieves"}},"product_version":"\u003c 1.3.1"}],"vulnerabilityVendor":[{"id":"59aff601-a6ee-3a40-b048-4e72dfc8a677","vendor":{"name":"The-40-Thieves"}}]}}],"enisaIdAdvisory":[]}