gcdRadar
archive/Patch now/AIR-2025-0479
closedclosed 5 Sep 2025Patch now2 Disclosed vulnerabilityAI

CVE-2025-58401: Obsidian GitHub Copilot Plugin cleartext credential storage

Obsidian GitHub Copilot Plugin

An insecure storage vulnerability in the Obsidian GitHub Copilot Plugin allows API tokens to be saved in cleartext. This could let unauthorized actors perform actions against linked GitHub accounts.

disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why

CVSS
6.8
EPSS
<0.01 · top 99% · 2026-11-13
EPSS scores by FIRST
fix status
Fix status unknown
first report
5 Sep 2025
last update
5 Sep 2025
CVE ids
CVE-2025-58401other records

Timeline · 1

  1. 5 Sep 2025CVE-2025-58401: Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form.

Sources · 1

Advisories and databases

  1. 2025-09-05
    CVE-2025-58401: Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form.
    NVD · nvd.nist.gov/vuln/detail/CVE-2025-58401

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Patch now
AI role
Attack on AI
categories
Infrastructure vulnerabilityData leak
severity
2 · Disclosed vulnerability
fix status
Fix status unknown
targets
Framework / tooling
owasp llm top 10
LLM02:2025 Sensitive Information DisclosureLLM03:2025 Supply Chain
mitre atlas
no technique for these categories
tags
cleartext-storageapi-token
dates
happened 5 Sep 2025 · first reported 5 Sep 2025
origin
NVD
Vulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
record
confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CVE-2025-58401: Obsidian GitHub Copilot Plugin cleartext credential storage

https://gcdradar.vercel.app/incidents/cve-2025-58401-obsidian-github-copilot-plugin-cleartext-cred · AIR-2025-0479 · closed 2025-09-05

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-09-05
- AI role: Attack on AI
- Products: Obsidian GitHub Copilot Plugin
- CVE ids: CVE-2025-58401
- CVSS: 6.8

## Summary

An insecure storage vulnerability in the Obsidian GitHub Copilot Plugin allows API tokens to be saved in cleartext. This could let unauthorized actors perform actions against linked GitHub accounts.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-09-05: CVE-2025-58401: Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. (https://nvd.nist.gov/vuln/detail/CVE-2025-58401)

## Sources

- 2025-09-05 NVD: CVE-2025-58401: Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. https://nvd.nist.gov/vuln/detail/CVE-2025-58401

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed6.5
    AgentAPI CVE-2025-59956: AgentAPI Client-Side DNS Rebinding Data Exfiltration Flaw

    Patch now · Disclosed · since 30 Sep 2025 · CVE-2025-59956

    AI
  2. closed6.0
    Dify CVE-2025-59422: Broken access control vulnerability in Dify exposes chat messages

    Patch now · Disclosed · since 25 Sep 2025 · CVE-2025-59422

    AI
  3. closed9.6
    Flowise CVE-2025-59434: Cross-tenant environment variable exposure in Flowise Cloud

    Patch now · Disclosed · since 22 Sep 2025 · CVE-2025-59434

    AI
  4. closed8.1
    claude-code-router CVE-2025-57755: claude-code-router CORS Misconfiguration API Key Exposure

    Patch now · Disclosed · since 21 Aug 2025 · CVE-2025-57755

    AI
  5. closed8.7
    MCP servers & tools CVE-2026-25650: MCP Salesforce Connector Auth Token Disclosure Vulnerability

    Patch now · Disclosed · since 6 Feb 2026 · CVE-2026-25650

    AI
  6. closed7.1
    MCP SDKs CVE-2026-25536: Model Context Protocol SDK cross-client data leak

    Patch now · Disclosed · since 4 Feb 2026 · CVE-2026-25536

    AI