Obot 0.26.0 through 0.26.1 contain an authorization bypass flaw, classified as CWE-863, that allows any authenticated user possessing any vMCP profile to reach prompts, resources, and resource templates belonging to components for which the user has no explicit permissions. The weakness arises because profile enforcement is applied only to tools, enabling attackers to exploit a vMCP owner's shared component connection to obtain unintended access to sensitive configuration data and manipulate exposed templates, thereby compromising confidentiality and potentially enabling further misuse of the system.

The affected product is Obot, released by obot‑platform. The flaw appears in version 0.26.0 up to, but not including, 0.26.2. Version 0.26.2 and later contain the fix that enforces profile checks on all relevant component types.

The CVSS score of 5.3 indicates a medium severity. No EPSS score is available, suggesting that current exploitation data is limited and the vulnerability may not be widely used yet. The flaw is not listed in the CISA KEV catalog. Based on the description, the likely attack vector requires the attacker to be an authenticated user possessing any vMCP profile; exploitation then occurs through the vMCP owner’s shared component connection, which the vulnerability allows to be reused for unauthorized prompt/resource access.