CyberRota Analysis
AI-GeneratedVersions of obot prior to v0.21.1 are vulnerable due to inadequate enforcement of Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user with the server ID to connect to restricted MCP servers. This flaw enables attackers to bypass authorization checks, potentially leading to unauthorized access and manipulation of sensitive backend systems via MCP tool calls using stored OAuth credentials. Organizations utilizing affected versions should prioritize immediate updates to mitigate this critical security risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipulate sensitive backend systems through MCP tool calls using stored OAuth credentials.