CVE-2026-104077: Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown
Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the data-background-iframe attribute, which bypasses DOMPurify and is processed by the bundled Reveal.js 4.3.1 within the Slides core plugin, allowing a javascript: URL to execute in the resulting background iframe. Because Node integration is enabled and context isolation is disabled in Obsidian's vault renderer, the injected script can call parent.require() to access Node APIs such as fs and childprocess, enabling arbitrary operating system command execution when the victim opens the note and manually starts the presentation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Obsidian Desktopto a version that resolves this vulnerability.Fixed in 1.14.0
Event History
Frequently Asked Questions
What user action is required for exploitation?
The victim must open an attacker-crafted Markdown note and start it as a presentation using the Slides core plugin. The malicious content is carried in a data-background-iframe attribute.
Who is exposed to this issue?
Obsidian Desktop users running versions earlier than 1.14.0 are affected when they open and present a malicious note. Successful exploitation runs commands with the privileges of the Obsidian user.
Does the attacker need local access or existing Obsidian permissions?
No existing privileges are required according to the vector. However, the attacker needs to convince a user to open the crafted note and start it as a presentation.
What can be done before updating?
Avoid opening untrusted Markdown notes as Slides presentations. Disabling or avoiding use of the Slides core plugin prevents the described presentation-processing path from being used.
How can I determine whether my installation is affected?
Check the installed Obsidian Desktop version. Versions earlier than 1.14.0 are affected by the described vulnerability.