CVE-2026-103758 — Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route
Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-conne…
Published: 2026-10-01 · CVSS: 8.6 · CVSS 4.0
Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect-composite/ route. Basic-role users with a composite MCP ID can proxy requests through mcpGateway.Proxy to invoke tools on MCP servers restricted by Access Control Rules.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7