Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Jimprosser
Obsidian-web-mcp
Jimprosser Obsidian-web-mcp vulnerabilities
jimprosser
obsidian-web-mcp
Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user
CVE-2026-54618
9.4
Critical
September 17, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open