---
id: CVE-2026-77364
title: >-
  obsidian-tc is a governed, agent-ready Model Context Protocol server for
  Obsidian vaults
summary: >-
  obsidian-tc is a governed, agent-ready Model Context Protocol server for
  Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings
  allow all paths, strictReadDefault does not protect direct requests, and the
  .obsidian,…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-200
  - CWE-276
published: '2026-10-12'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T18:17:23.677'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-77364'
references:
  - url: >-
      https://github.com/The-40-Thieves/obsidian-tc/commit/74de320ddea855e1dec47d67beabe88491149dab
    label: security-advisories@github.com
  - url: 'https://github.com/The-40-Thieves/obsidian-tc/pull/73'
    label: security-advisories@github.com
  - url: 'https://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.3.1'
    label: security-advisories@github.com
  - url: >-
      https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-cvp8-vvgf-69q4
    label: security-advisories@github.com
tags:
  - nvd
ingestedAt: '2026-10-12T19:01:57.229Z'
---

## Overview

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDefault does not protect direct requests, and the .obsidian, .git, and .trash control directories are excluded only during enumeration. An authenticated caller can directly read sensitive files such as .obsidian/plugins/*/data.json, potentially exposing plugin API keys, Obsidian Sync passwords, and other in-vault data. Version 1.3.1 fixes the vulnerability by denying the control directories by default and enforcing strictReadDefault on direct request paths.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.