mcpvault vulnerabilities

1 known vulnerability in mcpvault from Bitbonsai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  mcpvault: Improper Resolution of Path Equivalence

  CVE-2026-57441Sep 15, 2026Bitbonsai

  MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem