The-40-thieves Obsidian-tc vulnerabilities
- the-40-thieves obsidian-tcobsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes7.1 High
- the-40-thieves obsidian-tcobsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP7.1 High
- the-40-thieves obsidian-tcobsidian-tc symlink path mismatch bypasses read ACL restrictions4.7 Medium
- the-40-thieves obsidian-tcobsidian-tc bridge tools expose data outside the read ACL4.3 Medium
- the-40-thieves obsidian-tcobsidian-tc tokens can access arbitrary configured vaults9.9 Critical
- the-40-thieves obsidian-tcobsidian-tc fail-open default ACL exposes Obsidian control-directory secrets6.5 Medium
- the-40-thieves obsidian-tcobsidian-tc Streamable HTTP transport permits cross-origin loopback vault access8.8 High