1 matches found
Obot: MCP Registry API readable without authentication
Summary In affected versions, enabling registry authentication OBOTSERVERENABLEREGISTRYAUTH=true does not actually protect the MCP Registry endpoints under /v0.1/ — they remain readable by unauthenticated callers. Am I affected? You are affected if you run Obot = v0.22.1 with...
5.9AI score
SaveExploits0References3Affected Software1
20