# Obot authorization bypass in MCP gateway endpoint

Source: https://junglewise.ai/threats/obot-authorization-bypass-in-mcp-gateway-endpoint-1a4a6151  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-13. Updated: 2026-05-13  
License: CC BY 4.0 with a link back

Severity: critical · CVSS 9.6 · Published 2026-05-13

Obot, a platform for managing AI-driven tools and services, contains a security flaw that allows any logged-in user to access restricted internal tools. Even if an administrator has limited a specific tool (like an HR or ticketing system) to a small group, any other user with a basic account can bypass these restrictions. This could lead to unauthorized viewing of sensitive data or the execution of administrative actions across connected corporate systems.

Technologies: [github.com/obot-platform/obot (Go)](https://junglewise.ai/threats/technologies/github-com-obot-platform-obot), [Obot Platform Obot](https://junglewise.ai/threats/technologies/obot). Vendors: [Go](https://junglewise.ai/threats/vendors/go), [Obot Platform](https://junglewise.ai/threats/vendors/obot-platform).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Critical severity, with a CVSS score of 9.6, published 13 May 2026.

**Which products and versions are affected?** github.com/obot-platform/obot (Go) <= 0.21.0; Obot Platform Obot <= 0.21.0.

**Is there a fix for This vulnerability?** A patch was published on 2026-05-07: Version 0.21.1 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is This vulnerability attacked?** It is attacked over the network, in a network appliance.

**Am I affected?** Check whether you run github.com/obot-platform/obot (Go) or Obot Platform Obot at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An authorization bypass exists in the Obot MCP gateway endpoint `/mcp-connect/{mcp_id}`. While the UI correctly filters available servers based on Access Control Rules (ACRs), the backend endpoint fails to enforce these rules for direct API requests. An authenticated user with a valid session or API key can interact with any MCP server by manually crafting a POST request to the gateway URL if they know the target server's ID. This allows the attacker to list tools and execute tool calls using the platform's stored OAuth or API credentials, potentially gaining full access to upstream third-party services. The vulnerability is addressed in version 0.21.1.

## Affected products

- Obot Platform Obot <= 0.21.0

## Timeline

- 2026-05-07: patched: Version 0.21.1 released
- 2026-05-13: disclosed: GitHub Advisory published

## References

- [https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp](https://github.com/obot-platform/obot/security/advisories/GHSA-vw82-7fv8-r6gp)
- [https://github.com/obot-platform/obot/releases/tag/v0.21.1](https://github.com/obot-platform/obot/releases/tag/v0.21.1)
- [https://api.github.com/repos/obot-platform/obot/security-advisories/GHSA-vw82-7fv8-r6gp](https://api.github.com/repos/obot-platform/obot/security-advisories/GHSA-vw82-7fv8-r6gp)

## Related threats

- [Obot authentication bypass in CLI login flow](https://junglewise.ai/threats/cve-2026-114662-obot-before-0-26-0-contains-an-authentication-bypass)
- [Obot authorization bypass in MCP composite route](https://junglewise.ai/threats/cve-2026-103758-obot-0-21-1-through-0-24-1-contains-an-authorization-bypass)
- [obot authorization bypass in /mcp-connect endpoint](https://junglewise.ai/threats/cve-2026-101084-obot-versions-before-v0-21-1-fail-to-enforce-access-control)
- [Obot Docker quickstart unauthenticated admin access](https://junglewise.ai/threats/cve-2026-101065-obot-is-an-open-source-ai-agent-mcp-platform-in-all-versions-up)
- [Obot server-side request forgery in remote MCP server registration](https://junglewise.ai/threats/cve-2026-101064-obot-before-v0-23-0-contains-a-server-side-request-forgery)