{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-101084", "tracking": { "current_release_date": "2026-09-30T22:38:35.240716Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-101084", "initial_release_date": "2026-09-27T21:25:11.721272Z", "revision_history": [ { "date": "2026-09-27T21:25:11.721272Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-09-27T21:25:15.639917Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-09-28T00:27:25.003415Z", "number": "3", "summary": "NCSC Score updated." }, { "date": "2026-09-28T07:35:12.936805Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-09-28T12:12:49.282235Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| References created (2)." }, { "date": "2026-09-28T12:12:49.747697Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-09-28T12:13:04.242975Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-09-28T12:13:40.333377Z", "number": "8", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (2).| Products connected (58).| References created (4).| CWES updated (1)." }, { "date": "2026-09-28T12:13:53.015713Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-09-28T12:41:08.038581Z", "number": "10", "summary": "CVSS created.| CWES created (1).| Products created (2).| References created (2).| Description created for source.| Unknown change." }, { "date": "2026-09-28T12:41:12.728962Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-09-29T16:12:57.944172Z", "number": "12", "summary": "EPSS created.| Unknown change." }, { "date": "2026-09-29T16:13:03.052139Z", "number": "13", "summary": "NCSC Score updated." }, { "date": "2026-09-30T22:38:31.250012Z", "number": "14", "summary": "Unknown change." }, { "date": "2026-09-30T22:38:33.838178Z", "number": "15", "summary": "NCSC Score updated." } ], "status": "interim", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:semver/0.21.1", "product": { "name": "vers:semver/0.21.1", "product_id": "CSAFPID-9478762" } }, { "category": "product_version_range", "name": "vers:semver/<0.21.1", "product": { "name": "vers:semver/<0.21.1", "product_id": "CSAFPID-9478763" } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<0.21.1", "product": { "name": "vers:unknown/>=0|<0.21.1", "product_id": "CSAFPID-9478056" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0", "product": { "name": "vers:unknown/v0.1.0", "product_id": "CSAFPID-9478130" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc1", "product": { "name": "vers:unknown/v0.1.0-rc1", "product_id": "CSAFPID-9478134" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc2", "product": { "name": "vers:unknown/v0.1.0-rc2", "product_id": "CSAFPID-9478133" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc3", "product": { "name": "vers:unknown/v0.1.0-rc3", "product_id": "CSAFPID-9478132" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0-rc4", "product": { "name": "vers:unknown/v0.1.0-rc4", "product_id": "CSAFPID-9478131" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.0", "product": { "name": "vers:unknown/v0.10.0", "product_id": "CSAFPID-9478109" } }, { "category": "product_version_range", "name": "vers:unknown/v0.11.0", "product": { "name": "vers:unknown/v0.11.0", "product_id": "CSAFPID-9478107" } }, { "category": "product_version_range", "name": "vers:unknown/v0.11.0-rc1", "product": { "name": "vers:unknown/v0.11.0-rc1", "product_id": "CSAFPID-9478108" } }, { "category": "product_version_range", "name": "vers:unknown/v0.12.0", "product": { "name": "vers:unknown/v0.12.0", "product_id": "CSAFPID-9478105" } }, { "category": "product_version_range", "name": "vers:unknown/v0.12.0-rc1", "product": { "name": "vers:unknown/v0.12.0-rc1", "product_id": "CSAFPID-9478106" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0", "product": { "name": "vers:unknown/v0.13.0", "product_id": "CSAFPID-9478103" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0-rc1", "product": { "name": "vers:unknown/v0.13.0-rc1", "product_id": "CSAFPID-9478104" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0-rc2", "product": { "name": "vers:unknown/v0.13.0-rc2", "product_id": "CSAFPID-9478102" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.0", "product": { "name": "vers:unknown/v0.15.0", "product_id": "CSAFPID-9478100" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.0-rc1", "product": { "name": "vers:unknown/v0.15.0-rc1", "product_id": "CSAFPID-9478101" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.1", "product": { "name": "vers:unknown/v0.15.1", "product_id": "CSAFPID-9478099" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.1-rc1", "product": { "name": "vers:unknown/v0.15.1-rc1", "product_id": "CSAFPID-9478098" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.0", "product": { "name": "vers:unknown/v0.16.0", "product_id": "CSAFPID-9478097" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.0-rc1", "product": { "name": "vers:unknown/v0.16.0-rc1", "product_id": "CSAFPID-9478096" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.1", "product": { "name": "vers:unknown/v0.16.1", "product_id": "CSAFPID-9478095" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.2", "product": { "name": "vers:unknown/v0.16.2", "product_id": "CSAFPID-9478094" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0", "product": { "name": "vers:unknown/v0.17.0", "product_id": "CSAFPID-9478091" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0-rc1", "product": { "name": "vers:unknown/v0.17.0-rc1", "product_id": "CSAFPID-9478093" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0-rc2", "product": { "name": "vers:unknown/v0.17.0-rc2", "product_id": "CSAFPID-9478092" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.1", "product": { "name": "vers:unknown/v0.17.1", "product_id": "CSAFPID-9478090" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.0", "product": { "name": "vers:unknown/v0.18.0", "product_id": "CSAFPID-9478088" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.0-rc1", "product": { "name": "vers:unknown/v0.18.0-rc1", "product_id": "CSAFPID-9478089" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.1", "product": { "name": "vers:unknown/v0.18.1", "product_id": "CSAFPID-9478087" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.2-rc1", "product": { "name": "vers:unknown/v0.18.2-rc1", "product_id": "CSAFPID-9478086" } }, { "category": "product_version_range", "name": "vers:unknown/v0.19.0", "product": { "name": "vers:unknown/v0.19.0", "product_id": "CSAFPID-9478085" } }, { "category": "product_version_range", "name": "vers:unknown/v0.19.0-rc1", "product": { "name": "vers:unknown/v0.19.0-rc1", "product_id": "CSAFPID-9478084" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.0", "product": { "name": "vers:unknown/v0.2.0", "product_id": "CSAFPID-9478128" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.0-rc1", "product": { "name": "vers:unknown/v0.2.0-rc1", "product_id": "CSAFPID-9478129" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.1", "product": { "name": "vers:unknown/v0.2.1", "product_id": "CSAFPID-9478127" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0", "product": { "name": "vers:unknown/v0.20.0", "product_id": "CSAFPID-9478081" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0-rc1", "product": { "name": "vers:unknown/v0.20.0-rc1", "product_id": "CSAFPID-9478083" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0-rc2", "product": { "name": "vers:unknown/v0.20.0-rc2", "product_id": "CSAFPID-9478082" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.1", "product": { "name": "vers:unknown/v0.20.1", "product_id": "CSAFPID-9478080" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0", "product": { "name": "vers:unknown/v0.21.0", "product_id": "CSAFPID-9478077" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0-rc1", "product": { "name": "vers:unknown/v0.21.0-rc1", "product_id": "CSAFPID-9478079" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0-rc2", "product": { "name": "vers:unknown/v0.21.0-rc2", "product_id": "CSAFPID-9478078" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.1-rc1", "product": { "name": "vers:unknown/v0.21.1-rc1", "product_id": "CSAFPID-9478136" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.1-rc2", "product": { "name": "vers:unknown/v0.21.1-rc2", "product_id": "CSAFPID-9478135" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.0", "product": { "name": "vers:unknown/v0.3.0", "product_id": "CSAFPID-9478126" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0", "product": { "name": "vers:unknown/v0.4.0", "product_id": "CSAFPID-9478124" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0-rc1", "product": { "name": "vers:unknown/v0.4.0-rc1", "product_id": "CSAFPID-9478125" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.0", "product": { "name": "vers:unknown/v0.5.0", "product_id": "CSAFPID-9478123" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.1", "product": { "name": "vers:unknown/v0.5.1", "product_id": "CSAFPID-9478122" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.2", "product": { "name": "vers:unknown/v0.5.2", "product_id": "CSAFPID-9478121" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.0", "product": { "name": "vers:unknown/v0.6.0", "product_id": "CSAFPID-9478120" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.1", "product": { "name": "vers:unknown/v0.6.1", "product_id": "CSAFPID-9478119" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0", "product": { "name": "vers:unknown/v0.7.0", "product_id": "CSAFPID-9478118" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.1", "product": { "name": "vers:unknown/v0.7.1", "product_id": "CSAFPID-9478117" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0", "product": { "name": "vers:unknown/v0.8.0", "product_id": "CSAFPID-9478113" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0-rc1", "product": { "name": "vers:unknown/v0.8.0-rc1", "product_id": "CSAFPID-9478116" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0-rc2", "product": { "name": "vers:unknown/v0.8.0-rc2", "product_id": "CSAFPID-9478115" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0-rc3", "product": { "name": "vers:unknown/v0.8.0-rc3", "product_id": "CSAFPID-9478114" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.0", "product": { "name": "vers:unknown/v0.9.0", "product_id": "CSAFPID-9478111" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.0-rc1", "product": { "name": "vers:unknown/v0.9.0-rc1", "product_id": "CSAFPID-9478112" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.1-rc1", "product": { "name": "vers:unknown/v0.9.1-rc1", "product_id": "CSAFPID-9478110" } } ], "category": "product_name", "name": "obot" } ], "category": "vendor", "name": "obot-platform" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-101084", "cwe": { "id": "CWE-639", "name": "Authorization Bypass Through User-Controlled Key" }, "notes": [ { "category": "description", "text": "obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-101084" }, { "category": "description", "text": "obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-101084" }, { "category": "description", "text": "obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-101084.json?alt=media" }, { "category": "description", "text": "Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-5678.json?alt=media" }, { "category": "description", "text": "## Summary\n\nIf you have the MCP Server ID, you can connect to the MCP server even if you don't have permissions to the server.\n\nThe MCP gateway endpoint `/mcp-connect/{mcp_id}` does not enforce Access Control Rules (ACRs). Any authenticated Obot user who possesses an MCP Server ID can connect to that server through the gateway — including making tool calls — regardless of whether they are a member of any MCP Registry that grants access to the server.\n\nIn practice this means any User can fully use MCP servers that the administrator believed were restricted to specific groups.\n\n## Severity\n\nReporter estimate: **Critical**.\n\n| CVSS 3.1 metric | Value |\n|---|---|\n| Attack Vector | Network |\n| Attack Complexity | Low |\n| Privileges Required | Low (authenticated Obot user, any role ≥ Basic) |\n| User Interaction | None |\n| Scope | Changed (Obot authorization bypass enables access to data and operations on an upstream third-party service via Obot's stored OAuth credentials) |\n| Confidentiality | High |\n| Integrity | High (many MCP servers expose write tools — e.g. `updateEmployee`, `submitTimeoffRequest`, ticket creation, file writes) |\n| Availability | None |\n| **Vector** | `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N` |\n| **Score** | **9.3 / Critical** |\n\nThe upstream impact depends on which MCP servers are deployed and what scope their stored credentials hold; the bound is \"everything the platform's stored OAuth/API credentials can reach.\"\n\n## Affected Versions\n\nConfirmed on `obot v0.21.0`.\n\n## Vulnerability Details\n\nThe intended flow is that a user's authorization is checked during the OAuth process with Obot.\n\n1. The user connects to an MCP URL through Obot.\n2. During the callback, after the user logs into Obot, Obot checks that the user has access to the provided resource (the `/mcp-connect` URL in this case). Obot correctly determines the user's authorization during this flow.\n3. However, another authorization check (the UI authorizer, in this case) was erroneously providing access.\n\n## Reproduction\n\nTested on `obot v0.21.0`.\n\n**Setup:**\n\n1. Configure a multi-user MCP server connected to a sensitive backend — e.g. an HR system, ticketing system, or any service whose stored OAuth token grants broad read/write access. Note its ID.\n4. Create an MCP Registry / Access Control Rule that grants this server **only** to a small group (e.g. two HR employees). Remove the `everyone` group from the relevant rule.\n5. Create or identify a Basic User who is **not** a member of any registry granting access to this server.\n\n**Exploit:**\n\n6. Sign in as the Basic User.\n7. Verify the UI does not list the server in any connector picker (it does not — that path is correctly gated).\n8. Manually craft and call the gateway URL:\n\n ```\n POST https:///mcp-connect/\n Authorization: \n Content-Type: application/json\n\n {\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/list\"}\n ```\n\n9. Observe a successful response listing the server's tools.\n10. Issue an actual tool call:\n\n ```json\n {\"jsonrpc\":\"2.0\",\"id\":2,\"method\":\"tools/call\",\n \"params\":{\"name\":\"\",\"arguments\":{...}}}\n ```\n\n11. Observe the call succeeds, returning data scoped only by the **upstream** MCP server's OAuth credentials — not by Obot's ACRs.\n\nThe exploit works equally well via Claude Desktop / Claude Code / any MCP-aware client by configuring the gateway URL as a remote MCP endpoint with the user's API key.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-vw82-7fv8-r6gp.json?alt=media" }, { "category": "other", "text": "0.00279", "title": "EPSS" }, { "category": "other", "text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "title": "CVSSV4" }, { "category": "other", "text": "9.3", "title": "CVSSV4 base score" }, { "category": "other", "text": "4.1", "title": "NCSC Score" }, { "category": "other", "text": "There is cwe data available from source Nvd, Is related to CWE-639 (Authorization Bypass Through User-Controlled Key), The value of the most recent CVSS (V3) score", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-9478056", "CSAFPID-9478077", "CSAFPID-9478078", "CSAFPID-9478079", "CSAFPID-9478080", "CSAFPID-9478081", "CSAFPID-9478082", "CSAFPID-9478083", "CSAFPID-9478084", "CSAFPID-9478085", "CSAFPID-9478086", "CSAFPID-9478087", "CSAFPID-9478088", "CSAFPID-9478089", "CSAFPID-9478090", "CSAFPID-9478091", "CSAFPID-9478092", "CSAFPID-9478093", "CSAFPID-9478094", "CSAFPID-9478095", "CSAFPID-9478096", "CSAFPID-9478097", "CSAFPID-9478098", "CSAFPID-9478099", "CSAFPID-9478100", "CSAFPID-9478101", "CSAFPID-9478102", "CSAFPID-9478103", "CSAFPID-9478104", "CSAFPID-9478105", "CSAFPID-9478106", "CSAFPID-9478107", "CSAFPID-9478108", "CSAFPID-9478109", "CSAFPID-9478110", "CSAFPID-9478111", "CSAFPID-9478112", "CSAFPID-9478113", "CSAFPID-9478114", "CSAFPID-9478115", "CSAFPID-9478116", "CSAFPID-9478117", "CSAFPID-9478118", "CSAFPID-9478119", "CSAFPID-9478120", "CSAFPID-9478121", "CSAFPID-9478122", "CSAFPID-9478123", "CSAFPID-9478124", "CSAFPID-9478125", "CSAFPID-9478126", "CSAFPID-9478127", "CSAFPID-9478128", "CSAFPID-9478129", "CSAFPID-9478130", "CSAFPID-9478131", "CSAFPID-9478132", "CSAFPID-9478133", "CSAFPID-9478134", "CSAFPID-9478135", "CSAFPID-9478136", "CSAFPID-9478763" ], "known_not_affected": [ "CSAFPID-9478762" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101084" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-101084" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGO-2026-5678.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-vw82-7fv8-r6gp.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-101084.json?alt=media" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-101084" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://www.vulncheck.com/advisories/obot-before-0.21.1-authorization-bypass-via-mcp-connect" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/obot-platform/obot/releases/tag/v0.21.1" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/101xxx/CVE-2026-101084.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101084" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "baseScore": 9.6, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-9478056", "CSAFPID-9478077", "CSAFPID-9478078", "CSAFPID-9478079", "CSAFPID-9478080", "CSAFPID-9478081", "CSAFPID-9478082", "CSAFPID-9478083", "CSAFPID-9478084", "CSAFPID-9478085", "CSAFPID-9478086", "CSAFPID-9478087", "CSAFPID-9478088", "CSAFPID-9478089", "CSAFPID-9478090", "CSAFPID-9478091", "CSAFPID-9478092", "CSAFPID-9478093", "CSAFPID-9478094", "CSAFPID-9478095", "CSAFPID-9478096", "CSAFPID-9478097", "CSAFPID-9478098", "CSAFPID-9478099", "CSAFPID-9478100", "CSAFPID-9478101", "CSAFPID-9478102", "CSAFPID-9478103", "CSAFPID-9478104", "CSAFPID-9478105", "CSAFPID-9478106", "CSAFPID-9478107", "CSAFPID-9478108", "CSAFPID-9478109", "CSAFPID-9478110", "CSAFPID-9478111", "CSAFPID-9478112", "CSAFPID-9478113", "CSAFPID-9478114", "CSAFPID-9478115", "CSAFPID-9478116", "CSAFPID-9478117", "CSAFPID-9478118", "CSAFPID-9478119", "CSAFPID-9478120", "CSAFPID-9478121", "CSAFPID-9478122", "CSAFPID-9478123", "CSAFPID-9478124", "CSAFPID-9478125", "CSAFPID-9478126", "CSAFPID-9478127", "CSAFPID-9478128", "CSAFPID-9478129", "CSAFPID-9478130", "CSAFPID-9478131", "CSAFPID-9478132", "CSAFPID-9478133", "CSAFPID-9478134", "CSAFPID-9478135", "CSAFPID-9478136", "CSAFPID-9478763" ] } ], "title": "CVE-2026-101084" } ] }