CVE-2026-101084
obot before v0.21.1 Authorization Bypass via /mcp-connect
- State
- Published
- Severity
- 9.3 Critical
- Published
- Sep 27, 2026
- Updated
- Sep 30, 2026
- Reserved
- Sep 27, 2026
Description
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N | VulnCheck |
| 3.1 | 9.6 Critical | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N | VulnCheck |
Weaknesses
- CWE-639 Authorization Bypass Through User-Controlled Key
Affected Products
| Product | Versions |
|---|---|
obotobot-platform |
|
References
- GitHub Security Advisory (GHSA-vw82-7fv8-r6gp)vendor-advisory
- VulnCheck Advisory: obot before v0.21.1 Authorization Bypass via /mcp-connectthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.