Description

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/{entry_id} to obtain plaintext API keys or tokens and abuse them against backend services.

Related CPE's

Could not find any relations

References

https://github.com/obot-platform/obot

https://github.com/obot-platform/obot/blob/774972b92d86e0fbc7e0e9b36fdd06612859df9c/pkg/api/authz/resources.go#L27

https://github.com/obot-platform/obot/blob/774972b92d86e0fbc7e0e9b36fdd06612859df9c/pkg/api/handlers/mcp.go#L206-L212

https://github.com/obot-platform/obot/commit/644a1fd60a66125ced3de10b350a983e933def7a

https://github.com/obot-platform/obot/releases/tag/v0.26.2

https://github.com/obot-platform/obot/security/advisories/GHSA-q5wf-87f5-cxgq

https://www.vulncheck.com/advisories/obot-0.12.0-before-0.26.2-credential-exposure-via-mcp-catalog-entry-api

Weaknesses

[email protected]

Secondary
CWE-522

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.5 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-07T13:17:16.977Z

43 hours ago

Last modified

2026-10-07T17:16:46.333Z

39 hours ago