Skip to content
Heist/ feed
Back to feed
Critical

obot before v0.21.1 Authorization Bypass via /mcp-connect

Type: advisorySources: OSV

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-101084
Confirmed fixed CVEs
Not specified
Updated in this feed
7 Nov 2026, 05:10 UTC · Revision 1

Source evidence

obot before v0.21.1 Authorization Bypass via /mcp-connect

core-osv · Original source

Published 27 Sept 2026, 20:49 UTC

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.

osv:CVE-2026-101084
Complete source record
{
  "id": "73a9bc5b1a5ed078ca32f2512085da88743ff5ae67a37be405878df7776e87f1",
  "url": "https://osv.dev/vulnerability/CVE-2026-101084",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "obot before v0.21.1 Authorization Bypass via /mcp-connect",
    "summary": "obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.",
    "evidence": "osv:CVE-2026-101084",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2026-101084",
      "aliases": [
        "CVE-2026-101084",
        "GHSA-vw82-7fv8-r6gp",
        "GO-2026-5678"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/obot-platform/obot",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "2a2ec3f23ac564b2e2fab6b09fdef4ecd05fd496"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.21.1"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  },
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.21.1"
                      }
                    ],
                    "source": "DESCRIPTION"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.21.1-rc2",
            "v0.21.1-rc1",
            "v0.21.0",
            "v0.21.0-rc2",
            "v0.21.0-rc1",
            "v0.20.1",
            "v0.20.0",
            "v0.20.0-rc2",
            "v0.20.0-rc1",
            "v0.19.0-rc1",
            "v0.19.0",
            "v0.18.2-rc1",
            "v0.18.1",
            "v0.18.0",
            "v0.18.0-rc1",
            "v0.17.1",
            "v0.17.0",
            "v0.17.0-rc2",
            "v0.17.0-rc1",
            "v0.16.2",
            "v0.16.1",
            "v0.16.0-rc1",
            "v0.16.0",
            "v0.15.1-rc1",
            "v0.15.1",
            "v0.15.0",
            "v0.15.0-rc1",
            "v0.13.0-rc2",
            "v0.13.0",
            "v0.13.0-rc1",
            "v0.12.0",
            "v0.12.0-rc1",
            "v0.11.0",
            "v0.11.0-rc1",
            "v0.10.0",
            "v0.9.1-rc1",
            "v0.9.0",
            "v0.9.0-rc1",
            "v0.8.0",
            "v0.8.0-rc3",
            "v0.8.0-rc2",
            "v0.8.0-rc1",
            "v0.7.1",
            "v0.7.0",
            "v0.6.1",
            "v0.6.0",
            "v0.5.2",
            "v0.5.1",
            "v0.5.0",
            "v0.4.0",
            "v0.4.0-rc1",
            "v0.3.0",
            "v0.2.1",
            "v0.2.0",
            "v0.2.0-rc1",
            "v0.1.0",
            "v0.1.0-rc4",
            "v0.1.0-rc3",
            "v0.1.0-rc2",
            "v0.1.0-rc1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-101084.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:49.854381987Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101084.json",
        "https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-101084",
        "https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-639"
        ],
        "cna_assigner": "VulnCheck",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101084.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-101084",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 518338,
  "published_at": "2026-09-27T20:49:56.702+00:00"
}