What’s Vulnerable › Products

obot-platform obot vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your obot-platform obot version is affected

Latest obot-platform obot vulnerabilities

• CVE-2026-114662 — Obot before 0.26.0 API Key Theft via CLI Login Token Request (CVSS 8.1)
• CVE-2026-105140 — Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership (CVSS 4.2)
• CVE-2026-105139 — Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources (CVSS 4.3)
• CVE-2026-105138 — Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API (CVSS 6.5)
• CVE-2026-103758 — Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route (CVSS 8.1)
• CVE-2026-101084 — obot before v0.21.1 Authorization Bypass via /mcp-connect (CVSS 9.6)
• CVE-2026-101065 — Obot Quickstart Docker Deployment Unauthenticated Admin Access (CVSS 9.8)
• CVE-2026-101064 — Obot before v0.23.0 Server-Side Request Forgery via MCP (CVSS 7.6)
• CVE-2026-101063 — Obot before v0.23.0 Authentication Bypass via Registry API (CVSS 5.3)
• CVE-2026-101062 — Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration (CVSS 8.8)