Description
Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tools on MCP servers restricted by Access Control Rules.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| obot-platform | obot | 0.21.1 – ≤ 0.24.1 | — |
References
- GitHub Security Advisory (GHSA-6fwv-3h4c-37j9) vendor-advisory
- VulnCheck Advisory: Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route third-party-advisory