CVE-2025-58401 | Pierre-Adrien Vasseur Obsidian GitHub Copilot Plugin up to 1.1.6 cleartext storage

September 5, 2025 Yanac

A vulnerability classified as problematic was found in Pierre-Adrien Vasseur Obsidian GitHub Copilot Plugin up to 1.1.6. The impacted element is an unknown function. Executing manipulation can lead to cleartext storage of sensitive information.

The identification of this vulnerability is CVE-2025-58401. The attack can only be executed locally. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More