No-Instructions vulnerabilities
We track 1 vulnerability in No-Instructions products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest No-Instructions vulnerabilities
- 9.1 Critical severity
relay-server: Authorization Bypass Through User-Controlled Key
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were