Skip to content
Threat Feed
Subscribe

Product

Obot (<= 0.22.1)

1 brief RSS
high advisory

SSRF Vulnerability in Obot via Remote MCP Server URLs

Obot versions 0.22.1 and earlier are vulnerable to server-side request forgery (SSRF) allowing authenticated privileged users to probe internal network resources and cloud instance metadata services.

Obot +1 ssrf cloud-security vulnerability oauth authentication-bypass token-theft mcp
5t