CVE-2026-115478

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, "createentity", "linkentities", "renameentity", "unlinkentities" and "deleteentity" regenerate memory notes from SQLite at the computed "memory//.md" path without reliably preserving...