Oobot-platform

Products

Exploited and recent CVEs

• CVE-2026-114662 High 8.1 Obot before 0.26.0 API Key Theft via CLI Login Token Request 0.2%
• CVE-2026-105140 Medium 4.2 Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership 0.2%
• CVE-2026-105139 Medium 4.3 Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources 0.2%
• CVE-2026-105138 Medium 6.5 Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API 0.3%
• CVE-2026-103758 High 8.1 Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route 0.2%
• CVE-2026-101084 Critical 9.6 obot before v0.21.1 Authorization Bypass via /mcp-connect 0.3%
• CVE-2026-101065 Critical 9.8 Obot Quickstart Docker Deployment Unauthenticated Admin Access 0.4%
• CVE-2026-101064 High 7.6 Obot before v0.23.0 Server-Side Request Forgery via MCP 0.2%
• CVE-2026-101063 Medium 5.3 Obot before v0.23.0 Authentication Bypass via Registry API 0.2%
• CVE-2026-101062 High 8.8 Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration 0.3%