{"metadata": {"vulnerability": "CVE-2026-115477", "count": 10, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2026-10-22T15:06:52.738Z", "date_only": false, "value": "2026-10-22T15:06:52.738Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-115477", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T14:04:33.518Z", "date_only": false, "value": "2026-10-23T14:04:33.518Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-115477", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T14:04:33.518Z", "date_only": false, "value": "2026-10-23T14:04:33.518Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-115477", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T14:04:33.518Z", "date_only": false, "value": "2026-10-23T14:04:33.518Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-115477", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T15:17:29Z", "date_only": false, "value": "2026-10-23T15:17:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-737X-CWFR-5VVC", "record": "GHSA-737X-CWFR-5VVC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T15:17:29.840Z", "date_only": false, "value": "2026-10-23T15:17:29.840", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115477", "record": "FKIE_CVE-2026-115477", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T15:17:29.967Z", "date_only": false, "value": "2026-10-23T15:17:29.967", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115477", "record": "FKIE_CVE-2026-115477", "field": "lastModified"}, {"timestamp": "2026-10-23T15:20:18.724Z", "date_only": false, "value": "2026-10-23T15:20:18.724243Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490897269295636", "record": "CVE-2026-115477", "field": "creation_timestamp", "uuid": "f4996d18-09a8-4f71-a7ca-aaf1ccef4a08", "content": "CVE-2026-115477 obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with `auth.jwtSecret` configured and a 2026-07-28-era client declaring `elicitation.form` support, a dispatch-gated tool call offered an `inputRequired` confirmation could still complete after the human declined or cancelled, or the elicitation response was omitted or malformed, provided the client echoed the validly bound `requestState` on resubmission. The server trusted an authentic, call-bound state as proof of approval even though that state was minted before the `elicitation/create` leg was asked and proved only that the resubmission belonged to the same call. A client behaving incorrectly or under an attacker's control could therefore execute dispatch-gated destructive vault operations without the human's approval, while still requiring the caller's ordinary tool permissions. Only tools marked `destructive: true` or requiring a scope with a human-in-the-loop floor were reachable through this bypass. The sixteen handler-side conditionally gated tools, including `write_note` overwrite and `move_note`, did not read elicitation state on the modern wire and let neither approval nor decline through that path. Affected deployments using stdio or leaving `auth.jwtSecret` unset instead used the CLI `elicit_token` fallback and did not offer this `requestState` round trip. The fix does not prevent a malicious client from reporting a fabricated approval, because the server cannot verify that the client displayed the form or that a human saw it. This issue is fixed in version 1.31.4.\nhttps://www.cve.org/CVERecord?id=CVE-2026-115477https://github.com/The-40-Thieves/obsidian-tc/security/advisories/GHSA-737x-cwfr-5vvchttps://github.com/The-40-Thieves/obsidian-tc/issues/967https://github.com/The-40-Thieves/obsidian-tc/pull/969https://github.com/The-40-Thieves/obsidian-tc/commit/101c91c656e2c2b88bcf3696a5da035f8c032c71https://github.com/The-40-Thieves/obsidian-tc/blob/v1.31.4/CHANGELOG.mdhttps://github.com/The-40-Thieves/obsidian-tc/releases/tag/v1.31.4#The-40-Thieves #obsidian-tc#CVE_2026_115477#bot", "url": "https://infosec.exchange/users/cve/statuses/117490897269295636"}, {"timestamp": "2026-10-23T17:30:10Z", "date_only": false, "value": "2026-10-23T17:30:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-737X-CWFR-5VVC", "record": "GHSA-737X-CWFR-5VVC", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-23T17:30:10Z", "date_only": false, "value": "2026-10-23T17:30:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-737X-CWFR-5VVC", "record": "GHSA-737X-CWFR-5VVC", "field": "modified"}], "metrics": {"as_of": "2026-10-28T14:01:16.751Z", "anchors": {"origin": {"timestamp": "2026-10-23T14:04:33.518Z", "date_only": false, "value": "2026-10-23T14:04:33.518Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-115477", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-23T14:04:33.518Z", "date_only": false, "value": "2026-10-23T14:04:33.518Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-115477", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 431803.233594, "hours": 119.945342665, "days": 4.997722611041667, "min_seconds": 431803.233594, "max_seconds": 431803.233594, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-23T14:04:33.518Z", "date_only": false, "value": "2026-10-23T14:04:33.518Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-115477", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T14:01:16.751Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}