CVE-2026-19331
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Aug 09, 2026
Vendor
unknown
Description
A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the function readCanvas/writeCanvas of the file src/services/CanvasService.ts. Such manipulation leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.