From Markdown to a Shell: Two RCE Paths in Obsidian Desktop

CVE-2026-104077

Amartya Jha

In this Security Research

No headings found on page

[FAQ]

Frequently Asked
Questions

[GET STARTED]

Find out what's already

exploitable in your codebase.

Find out what's already

exploitable in your codebase.

Find out what's already exploitable in your codebase.

START PENTEST

NO CC REQUIRED