Skip to content
OpenAdvisories

Package · Go

github.com/obot-platform/obot

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-101084

    obot before v0.21.1 Authorization Bypass via /mcp-connect

    obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipul…

    obot-platform obot github.com/obot-platform/obot Go