Description
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates through the vMCP owner's shared component connection.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
obot-platform obot
Default version status: unaffected
0.26.0 to < 0.26.2affected
pkg:golang/github.com/obot-platform/obotReferences
- https://github.com/obot-platform/obot/commit/8d92701c2018a7b9dd6d692498fa5f41fdb912ea ↗
- https://github.com/obot-platform/obot ↗
- https://github.com/obot-platform/obot/security/advisories/GHSA-xhpw-65qw-wj6m ↗
- https://github.com/obot-platform/obot/releases/tag/v0.26.2 ↗
- https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L97 ↗
- https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L231 ↗
- https://www.vulncheck.com/advisories/obot-0.26.0-before-0.26.2-authorization-bypass-via-vmcp-profile-prompts-and-resources ↗