OB
Vendor
obot-platform
10
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114662 | OB obot obot-platform | 8.1 | Oct 22 | Obot before 0.26.0 API Key Theft via CLI Login Token Request |
| CVE-2026-105140 | OB obot obot-platform | 4.2 | Oct 7 | Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membership |
| CVE-2026-105139 | OB obot obot-platform | 4.3 | Oct 7 | Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources |
| CVE-2026-105138 | OB obot obot-platform | 6.5 | Oct 7 | Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API |
| CVE-2026-103758 | OB obot obot-platform | 8.1 | Oct 1 | Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Route |
| CVE-2026-101084 | OB obot obot-platform | 9.6 | Sep 27 | obot before v0.21.1 Authorization Bypass via /mcp-connect |
| CVE-2026-101065 | OB obot obot-platform | 9.8 | Sep 27 | Obot Quickstart Docker Deployment Unauthenticated Admin Access |
| CVE-2026-101064 | OB obot obot-platform | 7.6 | Sep 27 | Obot before v0.23.0 Server-Side Request Forgery via MCP |
| CVE-2026-101063 | OB obot obot-platform | 5.3 | Sep 27 | Obot before v0.23.0 Authentication Bypass via Registry API |
| CVE-2026-101062 | OB obot obot-platform | 8.8 | Sep 27 | Obot before v0.23.0 Authentication Bypass via OAuth Dynamic Client Registration |