Skip to content
OpenAdvisories

Vendor

obot-platform

10 known vulnerabilities.

Products

obot 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-101084

    obot before v0.21.1 Authorization Bypass via /mcp-connect

    obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipul…

    obot-platform obot github.com/obot-platform/obot Go
  • Critical 9.8
    CVE-2026-101065

    Obot Quickstart Docker Deployment Unauthenticated Admin Access

    Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authenticatio…

    obot-platform obot