CVE-2025-58401 – Obsidian GitHub Copilot Plugin Token Storage Vulnerability

CVE ID : CVE-2025-58401

Published : Sept. 5, 2025, 4:28 a.m. | 46 minutes ago

Description : Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacker may perform unauthorized operations on the linked Github account.

Severity: 6.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…