Login Request a demo
OB
Product
obot
by obot-platform · last CVE Oct 22, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 4Medium 4Low 0
Severity
All severities10Critical2High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add obot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-101065
9.8
0%
Sep 27
Obot Quickstart Docker Deployment Unauthenticated Admin Access
Affected: 0
CVE-2026-101084
9.6
0%
Sep 27
obot before v0.21.1 Authorization Bypass via /mcp-connect
Affected: before 0.21.1
CVE-2026-101062
8.8
0%
Sep 27
Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
Affected: before 0.23.0
CVE-2026-114662
New
8.1
0%
Oct 22
Obot before 0.26.0 API Key Theft via CLI Login Token Request
Affected: before 0.26.0
CVE-2026-103758
8.1
0%
Oct 1
Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route
Affected: 0.21.1 through 0.24.1
CVE-2026-101064
7.6
0%
Sep 27
Obot before v0.23.0 Server-Side Request Forgery via MCP
Affected: before 0.23.0
CVE-2026-105138
6.5
0%
Oct 7
Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API
Affected: 0.12.0 before 0.26.2
CVE-2026-101063
5.3
0%
Sep 27
Obot before v0.23.0 Authentication Bypass via Registry API
Affected: before 0.23.0
CVE-2026-105139
4.3
0%
Oct 7
Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources
Affected: 0.26.0 before 0.26.2
CVE-2026-105140
4.2
0%
Oct 7
Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership
Affected: 0.25.0 before 0.25.6; 0.26.0 before 0.26.1
Showing 10