VULNERABILITY INTELLIGENCE
CVE-2025-58401
CVSS score6.8 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2025-09-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Description
Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account.
Weakness classification
- vultures@jpcert.or.jp: CWE-312