CVE-2026-101084GHSA-VW82-7FV8-R6GPGO-2026-5678
obot before v0.21.1 Authorization Bypass via /mcp-connect
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 0.21.1
- Public exploit
- None on Exploit-DB
CISA SSVC
- Exploitation: poc
- Automatable: no
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.
Affected versions
- obot-platform obot
fixed in 0.21.1
- github.com/obot-platform/obotGo
fixed in 0.21.1