Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Obot platform Docker quickstart gives anyone admin rights

CVE-2026-101065 · published 21 days ago
Summary

The Docker quick‑start guide for Obot runs the service publicly on port 8080 without requiring a login, and treats every request as an administrator. Anyone who can reach that port can control the Obot interface and, because the container has access to the host’s Docker socket, could also control other containers on the server. To protect yourself, enable authentication by setting OBOT_SERVER_ENABLE_AUTHENTICATION=true before exposing the service to any network you do not fully control.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
obot-platform obot All versions
Original advisory text
Obot Quickstart Docker Deployment Unauthenticated Admin Access
Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped to a synthetic "nobody" user that holds the Owner and Admin roles, so any unauthenticated party who can reach the exposed port obtains full administrative access to the Obot API and UI, including the ability to register and launch attacker-controlled MCP servers. Because the quickstart also mounts /var/run/docker.sock into the container, the MCP runtime backend reachable this way has access to the host's Docker control surface. The fix is documentation-only: the quickstart now enables authentication, and operators who followed the previous instructions should set OBOT_SERVER_ENABLE_AUTHENTICATION=true before exposing the host to any untrusted network.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published27 Sep 2026
Updated19 Oct 2026
First seen27 Sep 2026
Sources
CVE-2026-101065 · NVD
CVE-2026-101065 · MITRE
Track software like this
Free during beta