Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-101062 · Microsoft / collected KEV context

EUVD-2026-88033

GHSA-cfp9-746c-5jrw

GHSA-xwmw-prc4-v3cr

GO-2026-6530

cve-program · CVE-2026-101062

• https://github.com/obot-platform/obot/security/advisories/GHSA-xwmw-prc4-v3cr
• https://www.vulncheck.com/advisories/obot-before-0.23.0-authentication-bypass-via-oauth-dynamic-client-registration

euvd · EUVD-2026-88033

• https://github.com/obot-platform/obot/security/advisories/GHSA-xwmw-prc4-v3cr
• https://www.vulncheck.com/advisories/obot-before-0.23.0-authentication-bypass-via-oauth-dynamic-client-registration

nvd · CVE-2026-101062

• https://github.com/obot-platform/obot/security/advisories/GHSA-xwmw-prc4-v3cr
• https://www.vulncheck.com/advisories/obot-before-0.23.0-authentication-bypass-via-oauth-dynamic-client-registration

osv · GHSA-xwmw-prc4-v3cr

• https://github.com/obot-platform/obot/security/advisories/GHSA-xwmw-prc4-v3cr
• https://github.com/obot-platform/obot
• https://github.com/obot-platform/obot/releases/tag/v0.23.0

osv · GO-2026-6530

• https://github.com/obot-platform/obot/security/advisories/GHSA-xwmw-prc4-v3cr
• https://github.com/obot-platform/obot/releases/tag/v0.23.0

No related operational record is retained in the current change model.