All vulnerabilities
CVE-2026-77361GHSA-c5xx-h28h-f682

obsidian-tc : Symlink read-ACL scope bypass via lexical path checks

The-40-Thieves obsidian-tcnpmLibraries & packages
Open in ThreatlineRecord JSON
CVSS
4.7Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.11%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.3.1Fixed versionGitHub
Published13 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 1.3.1obsidian-tc, npmGitHubnpm install obsidian-tc@1.3.1

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Impact

ACL checks ran on the lexical vault-relative path while containment used the realpath. An in-vault symlink placed under an allowed glob, whose realpath resolved into a denied folder, passed the read ACL — an intra-vault read-ACL-scope bypass. It requires an out-of-band-planted symlink (no MCP tool creates one) and is not a vault-root escape.

Patches

Fixed in 1.3.1. Upgrade to >= 1.3.1. ACL enforcement now derives the realpath vault-relative path and feeds a single unified predicate at every site.

Workarounds

Do not permit untrusted symlinks inside the vault.

Text from GitHub Advisory Database

Affected versions 3

  • obsidian-tc, npm< 1.3.1GitHub
  • obsidian-tcaffected: < 1.3.1CVE List
  • obsidian-tc, npmfrom first release, fixed in 1.3.1OSV

References 6