obot-platform vulnerabilities
10 published CVEs name obot-platform among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 2Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-114662
Obot before 0.26.0 API Key Theft via CLI Login Token Request
obot-platform · obot
High8.6 - CVE-2026-105140
Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership
obot-platform · obot
Low2.3 - CVE-2026-105139
Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources
obot-platform · obot
Medium5.3 - CVE-2026-105138
Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API
obot-platform · obot
High7.1 - CVE-2026-103758
Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route
obot-platform · obot
High8.6 - CVE-2026-101084
obot before v0.21.1 Authorization Bypass via /mcp-connect
obot-platform · obot
Critical9.3 - CVE-2026-101065
Obot Quickstart Docker Deployment Unauthenticated Admin Access
obot-platform · obot
Critical9.3 - CVE-2026-101064
Obot before v0.23.0 Server-Side Request Forgery via MCP
obot-platform · obot
High8.3 - CVE-2026-101063
Obot before v0.23.0 Authentication Bypass via Registry API
obot-platform · obot
Medium6.9 - CVE-2026-101062
Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
obot-platform · obot
High8.7