CVE-2026-101084 obot before v0.21.1 Authorization Bypass via /mcp-connect
Authenticated users can bypass authorization on the /mcp-connect endpoint to access restricted MCP servers and manipulate backend systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-101084?
CVE-2026-101084 is a critical missing authorization vulnerability in obot-platform obot, published on 27 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.
Weakness: CWE-639
Which versions are affected by CVE-2026-101084?
3 open source packages ship an affected version, including github.com/obot-platform/obot.
| Package | Affected | Fixed in |
|---|---|---|
github.com/obot-platform/obot Go | All versions | 0.21.1 |
github.com/obot-platform/obot Go | All versions | 0.21.1 |
github.com/obot-platform/obot Go | All versions | 0.21.1 |
How do I fix CVE-2026-101084?
Upgrade github.com/obot-platform/obot to 0.21.1 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-101084 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-101084 exists.
Sources
Also known as GHSA-g524-9c6h-8w7v, GHSA-vw82-7fv8-r6gp, GO-2026-5678.