{"id":"CVE-2026-103758","published":"2026-10-01T11:17:26.360","lastModified":"2026-10-01T15:17:29.407","description":"Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tools on MCP servers restricted by Access Control Rules.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://github.com/obot-platform/obot/security/advisories/GHSA-6fwv-3h4c-37j9","tags":[]},{"url":"https://www.vulncheck.com/advisories/obot-0.21.1-through-0.24.1-authorization-bypass-via-mcp-connect-composite-route","tags":[]}],"exploitRefs":[{"url":"https://github.com/obot-platform/obot/security/advisories/GHSA-6fwv-3h4c-37j9","tags":[]}],"hasPoc":true,"ai":{"summary":"This vulnerability allows authenticated users to bypass authorization checks and access restricted MCP servers, due to a missing route in the deny list.","exploitability":"Exploitation is relatively straightforward for authenticated users with basic roles, requiring them to use the /mcp-connect-composite/ route.","blast_radius":"If exploited, this could lead to unauthorized access to restricted tools and services on MCP servers, potentially compromising sensitive data and operations.","remediation":"Upgrade to Obot 0.25.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","mcp","proxy","vulnerability"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-05T08:44:04.581Z"}}