{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-101064", "tracking": { "current_release_date": "2026-09-30T18:40:12.725252Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-101064", "initial_release_date": "2026-09-27T21:25:23.203085Z", "revision_history": [ { "date": "2026-09-27T21:25:23.203085Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-09-27T21:25:26.748003Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-09-28T02:26:49.384066Z", "number": "3", "summary": "NCSC Score updated." }, { "date": "2026-09-28T07:35:12.936805Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-09-28T12:12:50.924769Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-09-28T12:13:34.025910Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (76).| References created (4).| CWES updated (1)." }, { "date": "2026-09-28T12:13:41.050599Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-09-28T12:41:07.091515Z", "number": "8", "summary": "CVSS created.| CWES created (1).| Products created (2).| References created (2).| Description created for source.| Unknown change." }, { "date": "2026-09-28T12:41:12.728962Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-09-28T13:38:44.144051Z", "number": "10", "summary": "Unknown change." }, { "date": "2026-09-28T18:13:35.351609Z", "number": "11", "summary": "Source created.| CVE status created. (valid)| Description created for source.| References created (2)." }, { "date": "2026-09-29T16:13:04.124131Z", "number": "12", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-29T16:13:08.979925Z", "number": "13", "summary": "NCSC Score updated." } ], "status": "interim", "version": "13" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:semver/0.23.0", "product": { "name": "vers:semver/0.23.0", "product_id": "CSAFPID-9478760" } }, { "category": "product_version_range", "name": "vers:semver/<0.23.0", "product": { "name": "vers:semver/<0.23.0", "product_id": "CSAFPID-9478761" } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<0.23.0", "product": { "name": "vers:unknown/>=0|<0.23.0", "product_id": "CSAFPID-9478057" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0", "product": { "name": "vers:unknown/v0.1.0", "product_id": "CSAFPID-9478130" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc1", "product": { "name": "vers:unknown/v0.1.0-rc1", "product_id": "CSAFPID-9478134" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc2", "product": { "name": "vers:unknown/v0.1.0-rc2", "product_id": "CSAFPID-9478133" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc3", "product": { "name": "vers:unknown/v0.1.0-rc3", "product_id": "CSAFPID-9478132" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc4", "product": { "name": "vers:unknown/v0.1.0-rc4", "product_id": "CSAFPID-9478131" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.0", "product": { "name": "vers:unknown/v0.10.0", "product_id": "CSAFPID-9478109" } }, { "category": "product_version_range", "name": "vers:unknown/v0.11.0", "product": { "name": "vers:unknown/v0.11.0", "product_id": "CSAFPID-9478107" } }, { "category": "product_version_range", "name": "vers:unknown/v0.11.0-rc1", "product": { "name": "vers:unknown/v0.11.0-rc1", "product_id": "CSAFPID-9478108" } }, { "category": "product_version_range", "name": "vers:unknown/v0.12.0", "product": { "name": "vers:unknown/v0.12.0", "product_id": "CSAFPID-9478105" } }, { "category": "product_version_range", "name": "vers:unknown/v0.12.0-rc1", "product": { "name": "vers:unknown/v0.12.0-rc1", "product_id": "CSAFPID-9478106" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0", "product": { "name": "vers:unknown/v0.13.0", "product_id": "CSAFPID-9478103" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0-rc1", "product": { "name": "vers:unknown/v0.13.0-rc1", "product_id": "CSAFPID-9478104" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0-rc2", "product": { "name": "vers:unknown/v0.13.0-rc2", "product_id": "CSAFPID-9478102" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.0", "product": { "name": "vers:unknown/v0.15.0", "product_id": "CSAFPID-9478100" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.0-rc1", "product": { "name": "vers:unknown/v0.15.0-rc1", "product_id": "CSAFPID-9478101" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.1", "product": { "name": "vers:unknown/v0.15.1", "product_id": "CSAFPID-9478099" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.1-rc1", "product": { "name": "vers:unknown/v0.15.1-rc1", "product_id": "CSAFPID-9478098" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.0", "product": { "name": "vers:unknown/v0.16.0", "product_id": "CSAFPID-9478097" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.0-rc1", "product": { "name": "vers:unknown/v0.16.0-rc1", "product_id": "CSAFPID-9478096" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.1", "product": { "name": "vers:unknown/v0.16.1", "product_id": "CSAFPID-9478095" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.2", "product": { "name": "vers:unknown/v0.16.2", "product_id": "CSAFPID-9478094" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0", "product": { "name": "vers:unknown/v0.17.0", "product_id": "CSAFPID-9478091" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0-rc1", "product": { "name": "vers:unknown/v0.17.0-rc1", "product_id": "CSAFPID-9478093" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0-rc2", "product": { "name": "vers:unknown/v0.17.0-rc2", "product_id": "CSAFPID-9478092" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.1", "product": { "name": "vers:unknown/v0.17.1", "product_id": "CSAFPID-9478090" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.0", "product": { "name": "vers:unknown/v0.18.0", "product_id": "CSAFPID-9478088" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.0-rc1", "product": { "name": "vers:unknown/v0.18.0-rc1", "product_id": "CSAFPID-9478089" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.1", "product": { "name": "vers:unknown/v0.18.1", "product_id": "CSAFPID-9478087" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.2-rc1", "product": { "name": "vers:unknown/v0.18.2-rc1", "product_id": "CSAFPID-9478086" } }, { "category": "product_version_range", "name": "vers:unknown/v0.19.0", "product": { "name": "vers:unknown/v0.19.0", "product_id": "CSAFPID-9478085" } }, { "category": "product_version_range", "name": "vers:unknown/v0.19.0-rc1", "product": { "name": "vers:unknown/v0.19.0-rc1", "product_id": "CSAFPID-9478084" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.0", "product": { "name": "vers:unknown/v0.2.0", "product_id": "CSAFPID-9478128" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.0-rc1", "product": { "name": "vers:unknown/v0.2.0-rc1", "product_id": "CSAFPID-9478129" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.1", "product": { "name": "vers:unknown/v0.2.1", "product_id": "CSAFPID-9478127" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0", "product": { "name": "vers:unknown/v0.20.0", "product_id": "CSAFPID-9478081" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0-rc1", "product": { "name": "vers:unknown/v0.20.0-rc1", "product_id": "CSAFPID-9478083" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0-rc2", "product": { "name": "vers:unknown/v0.20.0-rc2", "product_id": "CSAFPID-9478082" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.1", "product": { "name": "vers:unknown/v0.20.1", "product_id": "CSAFPID-9478080" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0", "product": { "name": "vers:unknown/v0.21.0", "product_id": "CSAFPID-9478077" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0-rc1", "product": { "name": "vers:unknown/v0.21.0-rc1", "product_id": "CSAFPID-9478079" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0-rc2", "product": { "name": "vers:unknown/v0.21.0-rc2", "product_id": "CSAFPID-9478078" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0", "product": { "name": "vers:unknown/v0.22.0", "product_id": "CSAFPID-9478065" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha1", "product": { "name": "vers:unknown/v0.22.0-alpha1", "product_id": "CSAFPID-9478076" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha2", "product": { "name": "vers:unknown/v0.22.0-alpha2", "product_id": "CSAFPID-9478075" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha3", "product": { "name": "vers:unknown/v0.22.0-alpha3", "product_id": "CSAFPID-9478074" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha4", "product": { "name": "vers:unknown/v0.22.0-alpha4", "product_id": "CSAFPID-9478073" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha5", "product": { "name": "vers:unknown/v0.22.0-alpha5", "product_id": "CSAFPID-9478072" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha6", "product": { "name": "vers:unknown/v0.22.0-alpha6", "product_id": "CSAFPID-9478071" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha7", "product": { "name": "vers:unknown/v0.22.0-alpha7", "product_id": "CSAFPID-9478070" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-alpha8", "product": { "name": "vers:unknown/v0.22.0-alpha8", "product_id": "CSAFPID-9478069" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-rc1", "product": { "name": "vers:unknown/v0.22.0-rc1", "product_id": "CSAFPID-9478068" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-rc2", "product": { "name": "vers:unknown/v0.22.0-rc2", "product_id": "CSAFPID-9478067" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0-rc3", "product": { "name": "vers:unknown/v0.22.0-rc3", "product_id": "CSAFPID-9478066" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.1", "product": { "name": "vers:unknown/v0.22.1", "product_id": "CSAFPID-9478064" } }, { "category": "product_version_range", "name": "vers:unknown/v0.23.0-rc1", "product": { "name": "vers:unknown/v0.23.0-rc1", "product_id": "CSAFPID-9478063" } }, { "category": "product_version_range", "name": "vers:unknown/v0.23.0-rc2", "product": { "name": "vers:unknown/v0.23.0-rc2", "product_id": "CSAFPID-9478062" } }, { "category": "product_version_range", "name": "vers:unknown/v0.23.0-rc3", "product": { "name": "vers:unknown/v0.23.0-rc3", "product_id": "CSAFPID-9478061" } }, { "category": "product_version_range", "name": "vers:unknown/v0.23.0-rc4", "product": { "name": "vers:unknown/v0.23.0-rc4", "product_id": "CSAFPID-9478060" } }, { "category": "product_version_range", "name": "vers:unknown/v0.23.0-rc5", "product": { "name": "vers:unknown/v0.23.0-rc5", "product_id": "CSAFPID-9478059" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.0", "product": { "name": "vers:unknown/v0.3.0", "product_id": "CSAFPID-9478126" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0", "product": { "name": "vers:unknown/v0.4.0", "product_id": "CSAFPID-9478124" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0-rc1", "product": { "name": "vers:unknown/v0.4.0-rc1", "product_id": "CSAFPID-9478125" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.0", "product": { "name": "vers:unknown/v0.5.0", "product_id": "CSAFPID-9478123" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.1", "product": { "name": "vers:unknown/v0.5.1", "product_id": "CSAFPID-9478122" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.2", "product": { "name": "vers:unknown/v0.5.2", "product_id": "CSAFPID-9478121" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.0", "product": { "name": "vers:unknown/v0.6.0", "product_id": "CSAFPID-9478120" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.1", "product": { "name": "vers:unknown/v0.6.1", "product_id": "CSAFPID-9478119" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0", "product": { "name": "vers:unknown/v0.7.0", "product_id": "CSAFPID-9478118" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.1", "product": { "name": "vers:unknown/v0.7.1", "product_id": "CSAFPID-9478117" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0", "product": { "name": "vers:unknown/v0.8.0", "product_id": "CSAFPID-9478113" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0-rc1", "product": { "name": "vers:unknown/v0.8.0-rc1", "product_id": "CSAFPID-9478116" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0-rc2", "product": { "name": "vers:unknown/v0.8.0-rc2", "product_id": "CSAFPID-9478115" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0-rc3", "product": { "name": "vers:unknown/v0.8.0-rc3", "product_id": "CSAFPID-9478114" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.0", "product": { "name": "vers:unknown/v0.9.0", "product_id": "CSAFPID-9478111" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.0-rc1", "product": { "name": "vers:unknown/v0.9.0-rc1", "product_id": "CSAFPID-9478112" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.1-rc1", "product": { "name": "vers:unknown/v0.9.1-rc1", "product_id": "CSAFPID-9478110" } } ], "category": "product_name", "name": "obot" } ], "category": "vendor", "name": "obot-platform" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-101064", "cwe": { "id": "CWE-918", "name": "Server-Side Request Forgery (SSRF)" }, "notes": [ { "category": "description", "text": "Obot: Server-Side Request Forgery via remote MCP server URL in github.com/obot-platform/obot", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-6522.json?alt=media" }, { "category": "description", "text": "Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make requests to internal services and cloud metadata endpoints, reading responses in error messages to disclose sensitive credentials.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-101064" }, { "category": "description", "text": "Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make requests to internal services and cloud metadata endpoints, reading responses in error messages to disclose sensitive credentials.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-101064" }, { "category": "description", "text": "Obot before v0.23.0 contains a server-side request forgery vulnerability in remote MCP server registration that allows privileged users to specify arbitrary URLs without destination validation. Attackers with Power User or higher roles can coerce Obot to make requests to internal services and cloud metadata endpoints, reading responses in error messages to disclose sensitive credentials.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-101064.json?alt=media" }, { "category": "description", "text": "## Summary\n\nIn affected versions, the URL of a remote MCP server is attacker-controlled at registration and is fetched server-side with no validation of the destination. There is no guard against loopback, link-local, RFC1918 private ranges, or the cloud metadata endpoint (`169.254.169.254`), so a use with the Power User, Power User Plus, or Admin role can coerce Obot into making requests to internal services and to the cloud instance metadata service, and read the responses.\n\n## Am I affected?\n\nYou are affected if you run Obot `<= v0.22.1` with authentication enabled and allow privileged users (with the Power User or higher privileges) to register remote MCP servers . The metadata-sync code path that triggers the fetch runs automatically during reconciliation, so no user interaction beyond registration is required.\n\n## Details\n\nA remote server's URL (`RemoteRuntimeConfig.URL`) is accepted at registration after only checking that it is parseable and uses an `http`/`https` scheme — the destination is never constrained. Obot then connects to that URL when the server is launched or its OAuth state is checked, and the controller automatically fetches OAuth discovery metadata from it during reconcile. The one egress guard that exists (`DisallowLocalhostMCP`) is disabled by default, only blocks loopback when enabled, and is absent from the automatic metadata-fetch path. Because the fetched response body is reflected back in Obot's error messages, this is a non-blind SSRF.\n\n## Impact\n\nAn attacker can reach internal-only services and the cloud metadata service if they have the Power User, Power User Plus, or Admin role. Against `169.254.169.254` this can disclose the host's cloud IAM credentials, enabling a pivot into the cloud account.\n\n## Mitigation\n\nUpgrade to **v0.23.0** or later, which applies a single outbound egress chokepoint — rejecting loopback, link-local (including `169.254.169.254`), RFC1918, and IPv6 ULA on the resolved IP at dial time — uniformly across the remote-MCP client and the OAuth-metadata client.\n\n## Severity\n\nCVSS v3.1 Score: **7.6/10 (High)** — `CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N`\n\n## Credits\n\nThe Obot team would like to thank HE WEI（ギカク）(https://www.linkedin.com/in/gikaku, [@hewei-gikaku](https://github.com/hewei-gikaku)) for responsibly disclosing this issue in accordance with our [security policy](https://github.com/obot-platform/obot/?tab=security-ov-file).", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-jgh3-fggc-mcpm.json?alt=media" }, { "category": "other", "text": "0.00243", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "8.3", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.3", "title": "NCSC Score" }, { "category": "other", "text": "There is cwe data available from source Nvd, The value of the most recent CVSS (V3) score", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-9478057", "CSAFPID-9478059", "CSAFPID-9478060", "CSAFPID-9478061", "CSAFPID-9478062", "CSAFPID-9478063", "CSAFPID-9478064", "CSAFPID-9478065", "CSAFPID-9478066", "CSAFPID-9478067", "CSAFPID-9478068", "CSAFPID-9478069", "CSAFPID-9478070", "CSAFPID-9478071", "CSAFPID-9478072", "CSAFPID-9478073", "CSAFPID-9478074", "CSAFPID-9478075", "CSAFPID-9478076", "CSAFPID-9478077", "CSAFPID-9478078", "CSAFPID-9478079", "CSAFPID-9478080", "CSAFPID-9478081", "CSAFPID-9478082", "CSAFPID-9478083", "CSAFPID-9478084", "CSAFPID-9478085", "CSAFPID-9478086", "CSAFPID-9478087", "CSAFPID-9478088", "CSAFPID-9478089", "CSAFPID-9478090", "CSAFPID-9478091", "CSAFPID-9478092", "CSAFPID-9478093", "CSAFPID-9478094", "CSAFPID-9478095", "CSAFPID-9478096", "CSAFPID-9478097", "CSAFPID-9478098", "CSAFPID-9478099", "CSAFPID-9478100", "CSAFPID-9478101", "CSAFPID-9478102", "CSAFPID-9478103", "CSAFPID-9478104", "CSAFPID-9478105", "CSAFPID-9478106", "CSAFPID-9478107", "CSAFPID-9478108", "CSAFPID-9478109", "CSAFPID-9478110", "CSAFPID-9478111", "CSAFPID-9478112", "CSAFPID-9478113", "CSAFPID-9478114", "CSAFPID-9478115", "CSAFPID-9478116", "CSAFPID-9478117", "CSAFPID-9478118", "CSAFPID-9478119", "CSAFPID-9478120", "CSAFPID-9478121", "CSAFPID-9478122", "CSAFPID-9478123", "CSAFPID-9478124", "CSAFPID-9478125", "CSAFPID-9478126", "CSAFPID-9478127", "CSAFPID-9478128", "CSAFPID-9478129", "CSAFPID-9478130", "CSAFPID-9478131", "CSAFPID-9478132", "CSAFPID-9478133", "CSAFPID-9478134", "CSAFPID-9478761" ], "known_not_affected": [ "CSAFPID-9478760" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101064" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-101064" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-jgh3-fggc-mcpm.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-101064.json?alt=media" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101064" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-6522.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/obot-platform/obot/security/advisories/GHSA-jgh3-fggc-mcpm" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://www.vulncheck.com/advisories/obot-before-0.23.0-server-side-request-forgery-via-mcp" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/obot-platform/obot/releases/tag/v0.23.0" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101064.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101064" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N", "baseScore": 7.6, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-9478057", "CSAFPID-9478059", "CSAFPID-9478060", "CSAFPID-9478061", "CSAFPID-9478062", "CSAFPID-9478063", "CSAFPID-9478064", "CSAFPID-9478065", "CSAFPID-9478066", "CSAFPID-9478067", "CSAFPID-9478068", "CSAFPID-9478069", "CSAFPID-9478070", "CSAFPID-9478071", "CSAFPID-9478072", "CSAFPID-9478073", "CSAFPID-9478074", "CSAFPID-9478075", "CSAFPID-9478076", "CSAFPID-9478077", "CSAFPID-9478078", "CSAFPID-9478079", "CSAFPID-9478080", "CSAFPID-9478081", "CSAFPID-9478082", "CSAFPID-9478083", "CSAFPID-9478084", "CSAFPID-9478085", "CSAFPID-9478086", "CSAFPID-9478087", "CSAFPID-9478088", "CSAFPID-9478089", "CSAFPID-9478090", "CSAFPID-9478091", "CSAFPID-9478092", "CSAFPID-9478093", "CSAFPID-9478094", "CSAFPID-9478095", "CSAFPID-9478096", "CSAFPID-9478097", "CSAFPID-9478098", "CSAFPID-9478099", "CSAFPID-9478100", "CSAFPID-9478101", "CSAFPID-9478102", "CSAFPID-9478103", "CSAFPID-9478104", "CSAFPID-9478105", "CSAFPID-9478106", "CSAFPID-9478107", "CSAFPID-9478108", "CSAFPID-9478109", "CSAFPID-9478110", "CSAFPID-9478111", "CSAFPID-9478112", "CSAFPID-9478113", "CSAFPID-9478114", "CSAFPID-9478115", "CSAFPID-9478116", "CSAFPID-9478117", "CSAFPID-9478118", "CSAFPID-9478119", "CSAFPID-9478120", "CSAFPID-9478121", "CSAFPID-9478122", "CSAFPID-9478123", "CSAFPID-9478124", "CSAFPID-9478125", "CSAFPID-9478126", "CSAFPID-9478127", "CSAFPID-9478128", "CSAFPID-9478129", "CSAFPID-9478130", "CSAFPID-9478131", "CSAFPID-9478132", "CSAFPID-9478133", "CSAFPID-9478134", "CSAFPID-9478761" ] } ], "title": "CVE-2026-101064" } ] }