[ Vendor · 5 CVEs ]
The-40-Thieves
CVEs affecting The-40-Thieves published in the last 30 days, plus any The-40-Thieves CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-77361 | 13 Oct 2026 | CVSS 4.7 | The-40-Thieves obsidian-tcobsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a… | |
| CVE-2026-77362 | 13 Oct 2026 | CVSS 4.3 | The-40-Thieves obsidian-tcobsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the… | |
| CVE-2026-77363 | 12 Oct 2026 | CVSS 8.8 | The-40-Thieves obsidian-tcobsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not… | |
| CVE-2026-77364 | 12 Oct 2026 | CVSS 6.5 | The-40-Thieves obsidian-tcobsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings… | |
| CVE-2026-77366 | 12 Oct 2026 | CVSS 9.9 | The-40-Thieves obsidian-tcobsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the… |