CVE-2026-101084, CoreCVE

Back Back to CVE browser

CRITICAL

obot before v0.21.1 Authorization Bypass via /mcp-connect

Published Sep 27, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.28%

Description

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.

Affected products

Vendor Obot-Platform Product Obot Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <0.21.1
- Version
  0.21.1
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Obot-Platform

Obot

unaffected

Version	Status	Constraints
0	affected	<0.21.1
0.21.1	unaffected	-

Ecosystem	Package	Introduced	Fixed
Go	github.com/obot-platform/obot	0	0.21.1

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-639

Authorization Bypass

References (2)

https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
exploitvendor-advisory
https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect
third-party-advisory

Link	Providers	Tags
https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp		exploitvendor-advisory
https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect		third-party-advisory