CVE-2026-115478 | -40-Thieves obsidian-tc up to 1.31.3 Memory race condition

October 23, 2026 Yanac

A vulnerability categorized as critical has been discovered in -40-Thieves obsidian-tc up to 1.31.3. Impacted is the function create_entity/link_entities/rename_entity/unlink_entities/delete_entity of the component Memory. The manipulation results in race condition.

This vulnerability was named CVE-2026-115478. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More