obot before v0.21.1 Authorization Bypass via /mcp-connect

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-101084 · CVE overview and exploitation status

EUVD-2026-88029

GHSA-g524-9c6h-8w7v

GHSA-vw82-7fv8-r6gp

GO-2026-5678

cve-program · CVE-2026-101084

• https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
• https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect

euvd · EUVD-2026-88029

• https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
• https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect

nvd · CVE-2026-101084

• https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
• https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect

osv · GHSA-vw82-7fv8-r6gp

• https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
• https://github.com/obot-platform/obot
• https://github.com/obot-platform/obot/releases/tag/v0.21.1

osv · GO-2026-5678

• https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
• https://github.com/obot-platform/obot/releases/tag/v0.21.1

No related changes are available here.