OB
Product
obot
10
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 2High 4Medium 4Low 0
Watch
Add obot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105138 | 6.5 | Oct 7 | Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API Affected: 0.12.0 before 0.26.2 |
| CVE-2026-101063 | 5.3 | Sep 27 | Obot before v0.23.0 Authentication Bypass via Registry API Affected: before 0.23.0 |
| CVE-2026-105139 | 4.3 | Oct 7 | Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources Affected: 0.26.0 before 0.26.2 |
| CVE-2026-105140 | 4.2 | Oct 7 | Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership Affected: 0.25.0 before 0.25.6; 0.26.0 before 0.26.1 |
Showing 4
