Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-58168: DeepTutor lets regular users run any system commands

CVE-2026-58168 · published today

Summary

Versions of DeepTutor before 1.4.10 do not correctly stop ordinary users from accessing powerful internal tools. As a result, a user without admin rights could see and launch tools that read files, run shell commands, or start a browser, exposing sensitive data. Upgrade to version 1.4.10 or later (or apply the vendor's patch) and review who is allowed to use these tools.

What to do

Update deeptutor to version 1.4.10.
Update hkuds deeptutor to version 1.4.10 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	hkuds	deeptutor	< 1.4.10
pip	–	deeptutor	< 1.4.10 Fix: upgrade to 1.4.10

Original advisory text

DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools

DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools is omitted from a user's grant in deeptutor/multi_user/tool_access.py. Attackers or prompt-injected content acting within a user session can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, gaining unauthorized access to sensitive deployment resources.

References

https://pypi.org/project/deeptutor Product
https://github.com/HKUDS/DeepTutor/commit/90046374b3dcd4f8a866d2d64a64440bc08eb2... URL
https://github.com/HKUDS/DeepTutor/releases/tag/v1.4.10 URL
https://github.com/HKUDS/DeepTutor/pull/579 URL
https://nvd.nist.gov/vuln/detail/CVE-2026-58168 Vendor Advisory
https://www.vulncheck.com/advisories/deeptutor-insecure-default-grants-unrestric... URL
https://github.com/advisories/GHSA-jg88-rvpc-qvxj Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58168... Vendor Advisory
https://github.com/HKUDS/DeepTutor Product

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

9.4 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-862Missing Authorization

Timeline

Published15 Oct 2026

Updated15 Oct 2026

First seen14 Jul 2026

Sources

CVE-2026-58168 · NVD

CVE-2026-58168 · MITRE

GHSA-jg88-rvpc-qvxj · GHSA

GHSA-jg88-rvpc-qvxj · OSV

CVE-2026-58168 · OSV

PYSEC-2026-4206 · OSV

Track software like this

Free during beta