Medium severity · published Oct 12, 2026
CVE-2026-77364
obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets
6.5
CVSS
0.2%
EPSS
No
On KEV
Description
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash control directories are excluded only during enumeration. An authenticated caller can directly read sensitive files such as .obsidian/plugins/*/data.json, potentially exposing plugin API keys, Obsidian Sync passwords, and other in-vault data. Version 1.3.1 fixes the vulnerability by denying the control directories by default and enforcing strictReadDefault on direct request paths.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
obsidian-tc · The-40-Thieves
< 1.3.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-77364
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-77364
x_refsource_CONFIRM
https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-cvp8-vvgf-69q4
x_refsource_MISC
https://github.com/The-40-Thieves/obsidian-tc/pull/73
x_refsource_MISC
https://github.com/The-40-Thieves/obsidian-tc/commit/74de320ddea855e1dec47d67beabe88491149dab
x_refsource_MISC
https://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.3.1
More from obsidian-tc
9.9
CVE-2026-77366
obsidian-tc tokens can access arbitrary configured vaults
8.8
CVE-2026-77363
obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access
7.1
CVE-2026-115478
obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes
7.1
CVE-2026-115477
obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP
4.7
CVE-2026-77361
obsidian-tc symlink path mismatch bypasses read ACL restrictions