CVE-2026-101084Published
obot before v0.21.1 Authorization Bypass via /mcp-connect
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-101084 · Microsoft / collected KEV context
cve-program · CVE-2026-101084
- https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
- https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect
euvd · EUVD-2026-88029
- https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
- https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect
nvd · CVE-2026-101084
- https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
- https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect
osv · GHSA-vw82-7fv8-r6gp
- https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp
- https://github.com/obot-platform/obot
- https://github.com/obot-platform/obot/releases/tag/v0.21.1
osv · GO-2026-5678
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.