
Vulnerabilities
Obsidian-TC Critical Flaw Allows Cross-Vault Data Theft Before 1.3.1
A critical authorization bypass in obsidian-tc versions prior to 1.3.1 lets attackers access any vault with a single valid token.
Everything Threat Times has reported about Model Context Protocol: 3 stories, newest first. Part of our Vulnerabilities coverage.

A critical authorization bypass in obsidian-tc versions prior to 1.3.1 lets attackers access any vault with a single valid token.

New Journey Transition Probability and MCP Protection features analyze agent steps and tool calls to flag risky behavior in real time.

Security researchers identified critical flaws in over 15,000 public Model Context Protocol servers, exposing the rapidly growing AI tool ecosystem to significant risk.