Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:obot:obot:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Obot: Authentication bypass in CLI login flow (CVE-2026-114662)

Obot versions prior to 0.26.0 contain an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to harvest API keys by manipulating token requests.

Obot authentication-bypass api-security web-application-vulnerability
1r 1t 1c
critical advisory

Obot Docker Quickstart Authentication Misconfiguration

Obot versions up to commit d7e6970 contain a default configuration vulnerability that exposes the application with administrative privileges and Docker socket access to unauthenticated network actors.

Obot +4 authorization-bypass cve mcp authentication-bypass oauth cve-2026-101062 cloud privilege-escalation +1
5t 1c updated