Obsidian vulnerabilities

Products

• Obsidian 5
• Desktop 2

Newest

• obsidian desktop Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass CVE-2026-104078 8.4 HighOctober 8, 2026
• obsidian desktop Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown CVE-2026-104077 8.5 HighOctober 8, 2026
• obsidian Obsidian Local File Disclosure CVE-2023-2110 8.2 HighAugust 19, 2023
• obsidian Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and... CVE-2023-33244 8.2 HighMay 20, 2023
• obsidian An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop... CVE-2023-27035 Public exploit 6.5 MediumMay 1, 2023
• obsidian Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution... CVE-2022-36450 EPSS 20.6% 8.0 HighJuly 25, 2022
• obsidian dataview Obsidian Dataview vulnerable to code injection due to unsafe eval CVE-2021-42057 Fix available 7.8 HighNovember 4, 2021
• obsidian Obsidian does not require user confirmation for non-http/https URLs. CVE-2021-38148 Fix available 9.8 CriticalAugust 7, 2021