Security Advisory

CVE-2026-19331

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-09 04:15:10
Last updated 2026-08-10 15:01:10
Assigner VulDB
CVSS score 5.3
State PUBLISHED

Description

A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.