CVE-2026-101063

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...

CVE-2026-101063 Obot before v0.23.0 Authentication Bypass via Registry API

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...

CVE-2026-101063: Missing Authorization

Obot versions before v0.23.0 fail to enforce authentication on MCP Registry endpoints under /v0.1/ when registry authentication is enabled. Unauthenticated attackers can read registry metadata including server names, descriptions, repository URLs, and connect URLs by sending GET requests to...

PT-2026-99709

Name of the Vulnerable Software and Affected Versions Obot versions prior to 0.23.0 Description When registry authentication is enabled via the OBOT SERVER ENABLE REGISTRY AUTH variable, the software fails to enforce authentication on MCP Registry endpoints under the /v0.1/ path. This occurs...

Malicious code in proto-registry-metadata-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1f7ab6f94cef6b0a1e53365370e91527c5c546ab409345d8a77877f5927f677 The OpenSSF Package Analysis project identified 'proto-registry-metadata-api' @ 1.11.3.87.g981ef7d3d rubygems as malicious. It is considered...

MAL-2025-46920 Malicious code in proto-registry-metadata-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1f7ab6f94cef6b0a1e53365370e91527c5c546ab409345d8a77877f5927f677 The OpenSSF Package Analysis project identified 'proto-registry-metadata-api' @ 1.11.3.87.g981ef7d3d rubygems as malicious. It is considered...