1 matches found
CVE-2026-101062: Incorrect Authorization
Obot before v0.23.0 affected versions = v0.22.1 running with OBOTSERVERENABLEAUTHENTICATION=true exposes OAuth dynamic client registration without authentication and without any restriction on the redirect URIs a client may register. Because the authorization flow auto-completes for an already...
8.8CVSS5.8AI score0.00336EPSS
SaveExploits0References2
20