Skip to content
OpenAdvisories

Package · Go

github.com/obot-platform/obot

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-101064

    Obot before v0.23.0 Server-Side Request Forgery via MCP

    Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make…

    obot-platform obot github.com/obot-platform/obot Go
  • High 8.8
    CVE-2026-101062

    Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration

    Obot before v0.23.0 (affected versions <= v0.22.1) running with OBOT_SERVER_ENABLE_AUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authori…

    obot-platform obot github.com/obot-platform/obot Go