Vulnerability · Published Oct 7, 2026 · Assigned by VulnCheck
CVE-2026-105139Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources
Medium 4.3
In plain English
A medium-severity incorrect authorization in obot from obot-platform. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.2%top 85.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates through the vMCP owner's shared component connection.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| obot-platform | obot | 0.26.0 – before 0.26.2 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- Patch Commit patch
- https://github.com/obot-platform/obot product
- GitHub Security Advisory (GHSA-xhpw-65qw-wj6m) vendor-advisory
- obot v0.26.2 Release Notes release-notes
- https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L97 technical-description
- https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L231 technical-description
- VulnCheck Advisory: Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources third-party-advisory