CVE-2026-115478: CWE-459: Incomplete Cleanup in The-40-Thieves obsidian-tc

obsidian-tc is a Model Context Protocol server for Obsidian vaults. Versions 1.0.1 through 1.31.3 have a vulnerability involving incomplete cleanup during entity lifecycle operations such as create_entity, link_entities, rename_entity, unlink_entities, and delete_entity. These operations regenerate memory notes from SQLite at computed paths but do not reliably preserve note ownership or handle failures consistently. This can cause overwriting of notes not owned by the entity being written, especially if note names sanitize to the same path. rename_entity can overwrite foreign notes without validating ownership. Additionally, several operations mutate SQLite before filesystem changes, so a filesystem failure can leave the memory graph inconsistent with on-disk notes. Authorized callers with memory-tool permissions can unintentionally destroy note bodies outside their entity scope. delete_entity requires additional deletion permissions and confirmation, so it is less affected. Snapshot-before-write via restore_note mitigates overwrites only if snapshots are enabled and the note was previously written through obsidian-tc. The vulnerability is fixed in version 1.31.4.

An authorized user with memory-tool permissions can unintentionally overwrite or destroy the content of vault notes outside the intended entity due to inconsistent ownership validation and incomplete cleanup during entity lifecycle operations. This can lead to data loss or corruption within the Obsidian vault. The vulnerability does not bypass delete_entity's additional deletion permissions and confirmation requirements. The memory graph and on-disk notes can become inconsistent after certain failures, potentially impacting data integrity.

Upgrade obsidian-tc to version 1.31.4 or later, where this vulnerability is fixed. If upgrading is not immediately possible, enable snapshot-before-write functionality via restore_note to mitigate overwrites, noting this only protects notes previously written through obsidian-tc and when snapshots are enabled. No other specific mitigations are indicated. Patch status is confirmed fixed in 1.31.4.