CVE-2026-19331

Technical details about CVE-2026-19331 are not publicly available in the provided documents. Monitor for updates from the disclosure or vendor advisories.

CVE-2026-19331 bazylhorsey obsidian-mcp-server CanvasService.ts writeCanvas path traversal

A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed of the problem early...

CVE-2026-19331: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed of the problem early...

PT-2026-69255

Name of the Vulnerable Software and Affected Versions bazylhorsey obsidian-mcp-server version 1.0.0 Description A path traversal issue exists in the readCanvas and writeCanvas functions within the src/services/CanvasService.ts file. This flaw allows a local attacker to access or modify files...