Obsidian Mcp Server
Monthly
Path traversal in bazylhorsey obsidian-mcp-server 1.0.0 allows local, low-privileged attackers to escape intended directory boundaries via the readCanvas and writeCanvas functions in CanvasService.ts, enabling unauthorized file reads and writes on the host filesystem. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N) with E:P confirms a proof-of-concept exploit exists, though exploitation is strictly local and bounded by the server process's OS-level permissions. No vendor patch has been released despite responsible disclosure through a GitHub issue, and no CISA KEV listing indicates confirmed active exploitation at time of analysis.
Path traversal in bazylhorsey obsidian-mcp-server 1.0.0 allows local, low-privileged attackers to escape intended directory boundaries via the readCanvas and writeCanvas functions in CanvasService.ts, enabling unauthorized file reads and writes on the host filesystem. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N) with E:P confirms a proof-of-concept exploit exists, though exploitation is strictly local and bounded by the server process's OS-level permissions. No vendor patch has been released despite responsible disclosure through a GitHub issue, and no CISA KEV listing indicates confirmed active exploitation at time of analysis.