CVE record · 1 source
CVE-2026-77363
CVSS 8.8obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.
- Vendor
- Anthropic
- Product
- Claude, AI / LLM tooling
- CVSS
- 8.8
- Exposure class
- AI infrastructure
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header or enable DNS-rebinding protection. When the…