14 matches found
CVE-2026-105139
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
CVE-2026-105139
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
CVE-2026-105139 Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
CVE-2026-105139 Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
EUVD-2026-94310
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
CVE-2026-105139 Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resources
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
CVE-2026-105139
The Obot platform (versions 0.26.0 before 0.26.2 ) contains an authorization bypass vulnerability. The root cause is that vMCP profiles were only enforced on tools, failing to restrict access to other elements. This allows authenticated users matching any vMCP profile to access prompts , resource...
PT-2026-107489
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
CVE-2026-105139: Incorrect Authorization
Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted components. Because profiles were enforced only on tools, attackers can access prompts, resources, and resource templates...
1xn-vmcp (>=0.5.2, <=0.6.1), a2c-smcp (>=0.1.1rc0, <=0.1.5) +854 more potentially affected by CVE-2026-52869 via mcp (>=1.0.0, <=1.27.1)
mcp PYPI version =1.0.0, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =1.2.3, =0.1.1, =0.11.3, =0.11.8, =0.1.0, =0.1.31 and more Source cves: CVE-2026-52869 Source advisory: OSV:PYSEC-2026-3482...
MINI-3HRM-VMCP-656P
Bulletin has no description...
1xn-vmcp (>=0.5.2, <=0.6.1), a2c-smcp (>=0.1.1rc0, <=0.1.5) +1089 more potentially affected by CVE-2026-59950 via mcp (>=1.0.0, <=1.28.0)
mcp PYPI version =1.0.0, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =0.1.7rc1, =1.2.3, =0.5.0, =0.1.1, =0.11.3, =0.11.8, =0.11.10 and more Source cves: CVE-2026-59950 Source advisory: GHSA-VJ7Q-GJH5-988W...
1xn-vmcp (>=0.5.2, <=0.6.1), a2c-smcp (>=0.1.1rc0, <=0.1.5) +863 more potentially affected by CVE-2026-52869 via mcp (>=0.9.1, <=1.27.1)
mcp PYPI version =0.9.1, =0.5.2, =0.1.1rc0, =0.0.2, =0.2.0, =1.2.3, =0.1.1, =0.11.3, =0.11.8, =0.1.0, =0.1.31 and more Source cves: CVE-2026-52869 Source advisory: MEND:CVE-2026-52869...