CVE-2026-77361 obsidian-tc symlink path mismatch bypasses read ACL restrictions
An attacker can bypass read ACL restrictions in obsidian-tc by using a symlink to access files in denied folders within the vault.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-77361?
CVE-2026-77361 is a medium-severity path traversal vulnerability in The-40-Thieves obsidian-tc, published on 13 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault symlink under an allowed glob that resolves into a denied folder can therefore bypass the read ACL and expose files in the denied folder. Exploitation requires an out-of-band-planted symlink and does not permit an escape from the vault root. Version 1.3.1 fixes the vulnerability by applying ACL checks to the resolved vault-relative path.
Which versions are affected by CVE-2026-77361?
2 open source packages ship an affected version, including obsidian-tc.
| Package | Affected | Fixed in |
|---|---|---|
obsidian-tc npm | All versions | 1.3.1 |
obsidian-tc npm | All versions | 1.3.1 |
How do I fix CVE-2026-77361?
Upgrade obsidian-tc to 1.3.1 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-77361 being exploited?
There is no known exploitation of CVE-2026-77361 in the wild and no public exploit code.
Sources
Also known as GHSA-c5xx-h28h-f682.