Skip to content
feed: live
0dayNews
CVE Record
[ MEDIUM ]CVE-2026-101063

Obot MCP Registry Endpoints Unauthenticated When Auth Is Enabled

Obot before v0.23.0 does not enforce authentication on MCP Registry endpoints at /v0.1/* even when registry auth is configured, exposing server listings to unauthenticated callers.

cat cve-2026-101063.json
Vendor
Obot Platform
Product
Obot (before v0.23.0)
CVSS
5.3
EPSS (exploit probability)
0.2%
Status
patched
Published
Source
https://github.com/obot-platform/obot/security/advisories/GHSA-pr6h-vr44-xq8j

Is CVE-2026-101063 being exploited?

Not on any exploited-vulnerability catalog we track. CVE-2026-101063 was not on the CISA, ENISA or CIRCL exploited catalogs as of our 2026-11-13 snapshot. That can change quickly; check the write-up below for the latest reporting.

FIRST's EPSS model puts the probability of exploitation activity in the next 30 days at 0.2% (scored October 14, 2026).

Catalog snapshot 2026-11-13. Full cross-catalog view: /kev-comparison

CVE-2026-101063 timeline

  1. Published to NVD
  2. First 0dayNews coverage+1d

Every event links to its source. Catalog dates are each catalog's own; day offsets count from NVD publication. Data: JSON

When registry authentication is enabled in Obot, affected releases still allow unauthenticated requests to the MCP Registry API under /v0.1/*. A remote caller can query /v0.1/servers and read catalog metadata such as server names, descriptions, repository URLs, and connection URLs without supplying credentials.

The advisory says the flaw exposes registry information but does not expose credential values or let an unauthenticated caller connect to a listed server. That narrower impact is reflected in the medium-severity rating. Deployments running Obot through v0.22.1 with OBOT_SERVER_ENABLE_REGISTRY_AUTH=true are affected.

Upgrade to Obot v0.23.0 or later. The fixed release treats the /v0.1 registry prefix as a protected route and enforces authentication before returning registry data. The issue was disclosed as GitHub Security Advisory GHSA-pr6h-vr44-xq8j.

Other Obot Platform CVEs we track

CVE / VulnerabilitySeverityCVSSEPSSAdded to KEV
CVE-2026-101084
Obot /mcp-connect Endpoint Ignores Access Control Ruleswrite-up
[ CRITICAL ]9.60.3%—
CVE-2026-101065
Obot Docker Quickstart Exposes API on All Interfaces Without Authwrite-up
[ CRITICAL ]9.80.4%—
Related coverage
~/articles/2026-09-28-obot-three-cves-mcp-docker-access-control
mcp

Obot AI Platform Patches Three CVEs, Two Critical

Three GitHub Security Advisories disclose an unauthenticated Docker exposure and two MCP endpoint access control failures in the Obot AI agent platform.

read →