cbcvebase.

No-Instructions Relay-Server vulnerabilities

1 known vulnerability affecting no-instructions/relay-server.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-42889P2CRITICALCVSS 9.1v>= 0.9.0, < 0.9.72026-05-12
CVE-2026-42889 [CRITICAL] CWE-639 CVE-2026-42889: Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full server permissions. An unauthenticated network attacke
nvd
No-Instructions Relay-Server vulnerabilities | cvebase