CVE-2026-103758

Name of the Vulnerable Software and Affected Versions Obot versions 0.21.1 through 0.24.1

Description An authorization bypass allows authenticated users to access MCP servers. This occurs because the checkUI deny list fails to include the '/mcp-connect-composite/' endpoint. Consequently, users with basic roles and a composite MCP ID can use mcpGateway.Proxy to proxy requests and invoke tools on MCP servers that are otherwise restricted by Access Control Rules.

Recommendations Update Obot to a version later than 0.24.1. Restrict access to the '/mcp-connect-composite/' endpoint as a temporary mitigation.