Skip to content
Threat Feed
Subscribe

Tag

Obsidian-Tc

1 brief RSS
high advisory

Obsidian obsidian-tc: HITL confirmation bypass in tool execution (CVE-2026-115477)

A vulnerability in the obsidian-tc server allows malicious or non-compliant clients to execute destructive tool calls by echoing validly bound request states even after a human-in-the-loop confirmation is declined.

obsidian-tc vulnerability hitl-bypass
1t 1c