GO-2026-5678 : Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot
Discover Packages
github.com/obot-platform/obot
pkg
controller
handlers
adminworkspace
package
Version:
v0.11.0
Opens a new window with list of versions in this module.
Published: Sep 23, 2025
License: Apache-2.0
Opens a new window with license information.
Imports: 11
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
Documentation
¶
EnsureAllAdminWorkspaces ensures PowerUserWorkspaces exist for all admin users
This should be called during controller startup
Source Files
¶
Click to show internal directories.
Click to hide internal directories.