Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/09/18 5:59 p.m.•12 views

Obot: MCP Registry API readable without authentication

Summary In affected versions, enabling registry authentication OBOTSERVERENABLEREGISTRYAUTH=true does not actually protect the MCP Registry endpoints under /v0.1/ — they remain readable by unauthenticated callers. Am I affected? You are affected if you run Obot = v0.22.1 with...

5.9AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder