## obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP

- 種別: advisory
- 重大度: high
- 関連技術: nodejs
- CVE: CVE-2026-115477
- 公開日時: 2026-10-23T17:30:10.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-737x-cwfr-5vvc)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-737x-cwfr-5vvc

影響: npm:obsidian-tc >= 1.13.0, <= 1.31.3 → 1.31.4
On a Streamable HTTP deployment with auth.jwtSecret configured, serving a 2026-07-28-era client that declared elicitation.form support, a call to a dispatch-gated tool (destructive: true, or a scope with an HITL floor) that was offered an inputRequired confirmation could still complete after the human declined, cancelled, or the elicitation response was omitted or malformed, provided the client echoed the validly bound requestState on resubmission. The server trusted an authentic, call-bound st…