Vulnerability · Published Oct 7, 2026 · Assigned by VulnCheck

CVE-2026-105138Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API

Medium 6.5

In plain English

A medium-severity security flaw in obot from obot-platform. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.3%top 81.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/{entry_id} to obtain plaintext API keys or tokens and abuse them against backend services.

Affected products (as reported)

Vendor	Product	Versions
obot-platform	obot	0.12.0 – before 0.26.2

Weakness: CWE-522 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

Patch Commit patch
https://github.com/obot-platform/obot product
GitHub Security Advisory (GHSA-q5wf-87f5-cxgq) vendor-advisory
obot v0.26.2 Release Notes release-notes
https://github.com/obot-platform/obot/blob/774972b92d86e0fbc7e0e9b36fdd06612859df9c/pkg/api/authz/resources.go#L27 technical-description
https://github.com/obot-platform/obot/blob/774972b92d86e0fbc7e0e9b36fdd06612859df9c/pkg/api/handlers/mcp.go#L206-L212 technical-description
VulnCheck Advisory: Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API third-party-advisory