GitHub Advisoryadvisory · npm

GHSA-43r2-c7g8-prc8 obsidian-tc Bridge tools leak denied-note data via unfiltered sibling fields

MEDIUM Published 2026-10-23 Modified 2026-10-23 Official page ↗
Aliases
CVE-2026-77362
Ecosystem
npm
Packages
obsidian-tc
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200, CWE-863
Reviewed
2026-10-23

Affected packages

• npm obsidian-tc: < 1.3.1 → fixed in 1.3.1

Description

Impact Bridge tool results filtered only the `items` array against the read ACL and passed sibling fields through unfiltered: `tasks_filter` emitted `groups` whose counts reflected denied notes, `makemd_query` returned `...result` siblings, and `list_templates` enumerated Templater template paths and parsed user-function bodies with no read-whitelist gate. A caller could infer or read data from notes outside its read ACL. Patches Fixed in 1.3.1. Upgrade to `>= 1.3.1`. All path-attributable fields are now scrubbed or fail-closed, and `list_templates` is gated on the read whitelist. Workarounds Disable the affected bridge tools (`tasks_filter`, `makemd_query`, `list_templates`) via tool visibility.

Related

Alias · CVE (1)

  • CVE-2026-77362 obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. vulnerability

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-863 Incorrect Authorization weakness

References