# CVE-2026-114662: Obot authentication bypass in CLI login flow

Source: https://junglewise.ai/threats/cve-2026-114662-obot-before-0-26-0-contains-an-authentication-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-22. Updated: 2026-10-22  
License: CC BY 4.0 with a link back

CVE-2026-114662 · Severity: high · CVSS 8.1 · Published 2026-10-22

Obot is a platform for building AI agents and automations. An authentication bypass in the CLI login system allows attackers to steal API keys from users by tricking them into clicking a malicious sign-in link, granting the attacker full account takeover including access to APIs, LLM gateways, and connected services. The attack requires only that the victim click a link sent by the attacker.

Technologies: [Obot Platform Obot](https://junglewise.ai/threats/technologies/obot). Vendors: [Obot Platform](https://junglewise.ai/threats/vendors/obot-platform).

## Quick answers

**Is CVE-2026-114662 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-114662 being exploited in the wild.

**How severe is CVE-2026-114662?** High severity, with a CVSS score of 8.1, published 22 October 2026.

**Which products and versions are affected?** Obot Platform Obot before 0.26.0.

**Is there a fix for CVE-2026-114662?** Yes: fixed in 0.26.0. Until then: If unable to upgrade immediately, block POST /api/token-request at your proxy to prevent the attack, though this also disables CLI login. After upgrading, review and delete any API keys that were not created intentionally. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-114662 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-114662?** Check whether you run Obot Platform Obot at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 0.26.0

If unable to upgrade immediately, block POST /api/token-request at your proxy to prevent the attack, though this also disables CLI login. After upgrading, review and delete any API keys that were not created intentionally.

## Technical details

An unauthenticated attacker can create a token request with an attacker-chosen ID via POST /api/token-request, then trick a signed-in user into opening the login link. The client-chosen request ID and lack of authentication on key retrieval allows the attacker to fetch the resulting API key before the legitimate user. The attacker can also set the key to never expire and assign arbitrary scopes, gaining full impersonation of the victim including admin access if applicable.

## Affected products

- Obot Platform Obot before 0.26.0

## Timeline

- 2026-10-06: disclosed
- 2026-10-22: advisory

## References

- [https://github.com/obot-platform/obot/security/advisories/GHSA-2qcm-3gv6-2mfc](https://github.com/obot-platform/obot/security/advisories/GHSA-2qcm-3gv6-2mfc)
- [https://www.vulncheck.com/advisories/obot-before-0.26.0-api-key-theft-via-cli-login-token-request](https://www.vulncheck.com/advisories/obot-before-0.26.0-api-key-theft-via-cli-login-token-request)

## Related threats

- [Obot authorization bypass in MCP composite route](https://junglewise.ai/threats/cve-2026-103758-obot-0-21-1-through-0-24-1-contains-an-authorization-bypass)
- [obot authorization bypass in /mcp-connect endpoint](https://junglewise.ai/threats/cve-2026-101084-obot-versions-before-v0-21-1-fail-to-enforce-access-control)
- [Obot Docker quickstart unauthenticated admin access](https://junglewise.ai/threats/cve-2026-101065-obot-is-an-open-source-ai-agent-mcp-platform-in-all-versions-up)
- [Obot server-side request forgery in remote MCP server registration](https://junglewise.ai/threats/cve-2026-101064-obot-before-v0-23-0-contains-a-server-side-request-forgery)
- [Obot authentication bypass in MCP Registry endpoints](https://junglewise.ai/threats/cve-2026-101063-obot-versions-before-v0-23-0-fail-to-enforce-authentication-on)