Login Request a demo
OB
Product
obot
by obot-platform · last CVE Oct 22, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 4Medium 4Low 0
Severity
All severities10Critical2High4Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add obot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-101062
8.8
0%
Sep 27
Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration
Affected: before 0.23.0
CVE-2026-114662
8.1
0%
Oct 22
Obot before 0.26.0 API Key Theft via CLI Login Token Request
Affected: before 0.26.0
CVE-2026-103758
8.1
0%
Oct 1
Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route
Affected: 0.21.1 through 0.24.1
CVE-2026-101064
7.6
0%
Sep 27
Obot before v0.23.0 Server-Side Request Forgery via MCP
Affected: before 0.23.0
Showing 4