Description
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates through the vMCP owner's shared component connection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| obot-platform | obot | 0.26.0 – < 0.26.2 | 0.26.2 |
References
- Patch Commit patch
- https://github.com/obot-platform/obot product
- GitHub Security Advisory (GHSA-xhpw-65qw-wj6m) vendor-advisory
- obot v0.26.2 Release Notes release-notes
- https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L97 technical-description
- https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L231 technical-description
- VulnCheck Advisory: Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources third-party-advisory