CVE-2026-101084

Name of the Vulnerable Software and Affected Versions bot versions prior to 0.21.1

Description An authorization bypass exists in the gateway endpoint /mcp-connect/{mcp id} where Access Control Rules (ACRs) are not enforced. Any authenticated user who possesses a specific MCP Server ID can connect to that server and execute tool calls, regardless of whether they have been granted permission through an MCP Registry. This allows users to bypass intended restrictions and manipulate sensitive backend systems using the platform's stored OAuth credentials.

Recommendations Update bot to version 0.21.1 or later. As a temporary mitigation, restrict access to the /mcp-connect endpoint to only authorized administrative users.