Read the docs
TI-2026-41886 Aliases CVE-2026-58168GHSA-jg88-rvpc-qvxj

DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users

Priority HIGH 69CWE-862Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-862.

Summary

DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools is omitted from a user's grant in deeptutor/multi_user/tool_access.py. Attackers or prompt-injected content acting within a user session can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, gaining unauthorized access to sensitive deployment resources.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00412 35th percentileScored 2026-11-07
Fix Fixed DeepTutor (HKUDS): 1.4.10deeptutor (PyPI): 1.4.10

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HKUDSDeepTutorbefore 1.4.101.4.10Patch availableCNA
—deeptutor (PyPI)before 1.4.101.4.10Patch availableGHSA-jg88-rvpc-qvxj
  • DeepTutor VendorHKUDS Affected before 1.4.10 Fixed in 1.4.10 Patch available CNA
  • deeptutor (PyPI) Vendor— Affected before 1.4.10 Fixed in 1.4.10 Patch available GHSA-jg88-rvpc-qvxj

Remediation

  • Fix · CNA DeepTutor (HKUDS) Fixed in 1.4.10
  • Fix · GHSA-jg88-rvpc-qvxj deeptutor (PyPI) Fixed in 1.4.10 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-58168
  2. 2026-10-03 Alias added: GHSA-jg88-rvpc-qvxj

References

Patch 2

Advisory 1

Other 2

  • TI-2026-44237 LightRAG: Missing Authentication for Critical API Functions in Default Configuration CVSS 3.1CRITICAL 9.8
  • TI-2026-78721 Missing authentication in HKUDS Vibe-Trading FastAPI server enables RCE CVSS 4.0CRITICAL 9.3
  • TI-2026-44184 Improper authentication in HKUDS LightRAG CVSS 4.0CRITICAL 9.3
  • TI-2026-26034 Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling CVSS 4.0HIGH 8.9
  • TI-2026-62432 HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool CVSS 4.0CRITICAL 9.2
  • TI-2026-25310 DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py CVSS 4.0HIGH 8.7
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences