GHSA-c5xx-h28h-f682

Suggest an improvement
Source
https://github.com/advisories/GHSA-c5xx-h28h-f682
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-c5xx-h28h-f682/GHSA-c5xx-h28h-f682.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-c5xx-h28h-f682
Aliases
Published
2026-10-23T17:28:19Z
Modified
2026-10-23T17:45:03Z
Severity
  • 4.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
obsidian-tc : Symlink read-ACL scope bypass via lexical path checks
Details

Impact

ACL checks ran on the lexical vault-relative path while containment used the realpath. An in-vault symlink placed under an allowed glob, whose realpath resolved into a denied folder, passed the read ACL — an intra-vault read-ACL-scope bypass. It requires an out-of-band-planted symlink (no MCP tool creates one) and is not a vault-root escape.

Patches

Fixed in 1.3.1. Upgrade to >= 1.3.1. ACL enforcement now derives the realpath vault-relative path and feeds a single unified predicate at every site.

Workarounds

Do not permit untrusted symlinks inside the vault.

Database specific 
{
    "cwe_ids":  [
        "CWE-59",
        "CWE-863"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-10-23T17:28:19Z",
    "nvd_published_at":  "2026-10-13T14:17:42Z",
    "severity":  "MODERATE"
}
References

Affected packages

npm / obsidian-tc

Package

Name
obsidian-tc
View open source insights on deps.dev
Purl
pkg:npm/obsidian-tc

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.3.1

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-c5xx-h28h-f682/GHSA-c5xx-h28h-f682.json"