CVE record · 1 source
CVE-2026-77366
CVSS 9.9obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.
- Vendor
- Anthropic
- Product
- Claude, AI / LLM tooling
- CVSS
- 9.9
- EPSS
- 0.003 (p24)
- Exposure class
- AI infrastructure
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the vault bound to the caller, the JSON Web…