CVE-2026-101084

CRITICAL 9.6

obot before v0.21.1 Authorization Bypass via /mcp-connect

CVSS Score

9.6

EPSS Score

0.0%

EPSS Percentile

0th

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.

CWE	CWE-639
Vendor	obot-platform
Product	obot
Published	Sep 27, 2026

Stay Ahead of the Next One

Get instant alerts for obot-platform obot

Be the first to know when new critical vulnerabilities affecting obot-platform obot are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Affected Versions

obot-platform / obot

0 < 0.21.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp vulncheck.com: https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect