CVE-2026-101084CWE-639

CVE-2026-101084

Critical · published September 28, 2026

CVSS v3.1
9.6
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-09-28T01:17Z
References (3)
https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp · [email protected]https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect · [email protected]https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 29 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 27 SEP 20:49Z
    obot before v0.21.1 Authorization Bypass via /mcp-connect
    cvelistv5