Login Request a demo
Medium severity · published Oct 7, 2026
CVE-2026-105139
Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources
4.3
CVSS
0.2%
EPSS
No
On KEV
Description
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates through the vMCP owner's shared component connection.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
obot · obot-platform
0.26.0 before 0.26.2 · source: vendor
Affected product
OB
obot
obot-platform
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105139
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105139
patch
https://github.com/obot-platform/obot/commit/8d92701c2018a7b9dd6d692498fa5f41fdb912ea
product
https://github.com/obot-platform/obot
vendor-advisory
https://github.com/obot-platform/obot/security/advisories/GHSA-xhpw-65qw-wj6m
release-notes
https://github.com/obot-platform/obot/releases/tag/v0.26.2
technical-description
https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L97
technical-description
https://github.com/obot-platform/obot/blob/8cfac5d38baa4fa0719e7975b7542608ff8bc932/pkg/mcp/vmcp.go#L231
More from obot
9.8
CVE-2026-101065
Obot Quickstart Docker Deployment Unauthenticated Admin Access
9.6
CVE-2026-101084
obot before v0.21.1 Authorization Bypass via /mcp-connect
8.8
CVE-2026-101062
Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
8.1
CVE-2026-114662
Obot before 0.26.0 API Key Theft via CLI Login Token Request
8.1
CVE-2026-103758
Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route