CVE-2026-77366 | -40-Thieves obsidian-tc up to 1.3.0 Tool Dispatch input.vault access control

October 12, 2026 Yanac

A vulnerability categorized as critical has been discovered in -40-Thieves obsidian-tc up to 1.3.0. The impacted element is an unknown function of the component Tool Dispatch. The manipulation of the argument input.vault results in improper access controls.

This vulnerability was named CVE-2026-77366. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More