The-40-thieves vulnerabilities
Products
Newest
- the-40-thieves obsidian-tc obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes 7.1 High
- the-40-thieves obsidian-tc obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP 7.1 High
- the-40-thieves obsidian-tc obsidian-tc symlink path mismatch bypasses read ACL restrictions 4.7 Medium
- the-40-thieves obsidian-tc obsidian-tc bridge tools expose data outside the read ACL 4.3 Medium
- the-40-thieves obsidian-tc obsidian-tc tokens can access arbitrary configured vaults 9.9 Critical
- the-40-thieves obsidian-tc obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets 6.5 Medium
- the-40-thieves obsidian-tc obsidian-tc Streamable HTTP transport permits cross-origin loopback vault access 8.8 High