obsidian-mcp-server CVE-2026-19331

Q: What is the CVSS score of CVE-2026-19331?

CVE-2026-19331 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-54868 LOW

Path Traversal (CWE-22)

2026-08-09 VulDB

GHSA-6p38-w68x-9w82

Path Traversal Obsidian Mcp Server

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Local attack vector and low-privilege requirement match description; partial C/I/A impact reflects bounded file access within process permissions with no scope change.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Aug 09, 2026 - 05:22 NVD

MEDIUM LOW

CVSS changed

Aug 09, 2026 - 05:22 NVD

4.8 (MEDIUM) 1.9 (LOW)

Analysis Generated

Aug 09, 2026 - 04:58 vuln.today

DescriptionCVE.org

A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Path traversal in bazylhorsey obsidian-mcp-server 1.0.0 allows local, low-privileged attackers to escape intended directory boundaries via the readCanvas and writeCanvas functions in CanvasService.ts, enabling unauthorized file reads and writes on the host filesystem. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N) with E:P confirms a proof-of-concept exploit exists, though exploitation is strictly local and bounded by the server process's OS-level permissions. No vendor patch has been released despite responsible disclosure through a GitHub issue, and no CISA KEV listing indicates confirmed active exploitation at time of analysis.

Technical ContextAI

obsidian-mcp-server is a Model Context Protocol (MCP) server plugin for the Obsidian note-taking application, providing programmatic canvas read/write operations. The vulnerability resides in the readCanvas and writeCanvas functions within src/services/CanvasService.ts, where user-supplied filename or path arguments are passed to filesystem operations without adequate sanitization or boundary enforcement. This is a CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) flaw - a classic path traversal - where an attacker can inject sequences such as '../' to escape the intended vault or canvas directory and access arbitrary files on the underlying filesystem. The CPE string cpe:2.3:a:bazylhorsey:obsidian-mcp-server:*:*:*:*:*:*:*:* uses a wildcard version qualifier, indicating no patched release has been catalogued in NVD at time of analysis.

RemediationAI

No vendor-released patch has been identified at time of analysis; the project maintainer was notified via GitHub issue (https://github.com/bazylhorsey/obsidian-mcp-server/issues/3) but has not responded. As an immediate compensating control, restrict the OS account running obsidian-mcp-server to a dedicated low-privilege user with filesystem permissions scoped exclusively to the intended Obsidian vault directory using OS-level access controls (e.g., Linux DAC or AppArmor/SELinux profiles) - this directly limits the reachable file scope during traversal exploitation, though it does not fix the underlying flaw. As a stronger mitigation, run the MCP server process inside a container or chroot jail, confining the accessible filesystem to the vault root; note that this may break features relying on files outside the vault. Monitor the GitHub repository and VulDB advisory at https://vuldb.com/vuln/387165 for a patched release and upgrade immediately upon availability.