What’s Vulnerable › Products

jimprosser obsidian-web-mcp vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your jimprosser obsidian-web-mcp version is affected

Latest jimprosser obsidian-web-mcp vulnerabilities

• CVE-2026-54618 — Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user (CVSS 9.4)