obot before v0.21.1 Authorization Bypass via /mcp-connect
Priority HIGH 75CWE-639Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.
Summary
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00346 28th percentileScored 2026-11-07
Fix Fixed obot (obot-platform): 0.21.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| obot-platform | obot | before 0.21.1 | 0.21.1 | Patch available | CNA |
- obot Vendorobot-platform Affected before 0.21.1 Fixed in 0.21.1 Patch available CNA
Remediation
- Fix · CNA obot (obot-platform) Fixed in 0.21.1
Timeline
- 2026-10-02 Threatist record created from CVE-2026-101084
- 2026-10-03 Alias added: GHSA-g524-9c6h-8w7v
References
More obot-platform vulnerabilities
- TI-2026-65098 Obot Quickstart Docker Deployment Unauthenticated Admin Access CVSS 4.0CRITICAL 9.3
- TI-2026-65095 Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration CVSS 4.0HIGH 8.7
- TI-2026-65757 Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route CVSS 4.0HIGH 8.6
- TI-2026-79161 Authentication bypass in Obot CLI login exposes API keys CVSS 4.0HIGH 8.6
- TI-2026-65097 Obot before v0.23.0 Server-Side Request Forgery via MCP CVSS 4.0HIGH 8.3
- TI-2026-65096 Obot before v0.23.0 Authentication Bypass via Registry API CVSS 4.0MEDIUM 6.9
Sources
- CVE-2026-101084 · CVE Program
- CVE-2026-101084 · NVD
- FIRST EPSS
- GHSA-g524-9c6h-8w7v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences