GO-2026-5678: Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot

projectmcpserver

package

v0.19.2 Latest Latest Go to latest Published: Apr 22, 2026 License: MIT Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/obot-platform/obot

Links

Documentation ¶

Index ¶

type Handler
- func NewHandler() *Handler
- func (h *Handler) EnsureMCPServerName(req router.Request, _ router.Response) error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Handler ¶

type Handler struct{}

func NewHandler ¶

func NewHandler() *Handler

func (*Handler) EnsureMCPServerName ¶

func (h *Handler) EnsureMCPServerName(req router.Request, _ router.Response) error

Source Files ¶

View all Source files

projectmcpserver.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL