CVE-2026-104078

7.8 HIGH

Published 2026-10-08 · Updated 2026-10-12

AI risk analysis

Summary: Obsidian Desktop before 1.14.0 has a vulnerability where attackers can bypass URL filtering in MathJax to execute arbitrary OS commands through crafted notes with malicious MathJax formulas. This allows remote code execution as the desktop user.
Exploitability: Exploitation requires crafting a malicious note with a specific TAB-byte encoded URL in a MathJax formula, but once created, the attack is easily triggered when victims click on the rendered formula in Live Preview mode.
Blast radius: The vulnerability affects all Obsidian Desktop users running versions before 1.14.0 who open malicious notes containing crafted MathJax formulas, potentially leading to full system compromise as the desktop user.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to Obsidian Desktop 1.14.0 or later to receive the patched MathJax component that fixes the URL filtering bypass.

rcewebmathjaxdesktop

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a crafted \href value with a TAB byte in the URL scheme, causing filterURL to produce an empty protocol that bypasses the configured safeProtocols restrictions. Attackers can craft a note containing a malicious MathJax formula that renders as a javascript: URL anchor, which when clicked by the victim in Live Preview executes in the Node-integration-enabled vault renderer via require('child_process'), achieving arbitrary operating system command execution as the desktop user.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-79, CWE-1188

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.