CVE-2026-77364 | -40-Thieves obsidian-tc up to 1.3.0 readPaths/writePaths/strictReadDefault privileges management

October 12, 2026 Yanac

A vulnerability classified as problematic was found in -40-Thieves obsidian-tc up to 1.3.0. This affects an unknown part. The manipulation of the argument readPaths/writePaths/strictReadDefault results in improper privilege management.

This vulnerability is cataloged as CVE-2026-77364. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More