agentprime: obotEvery new CVE for obot.https://agentprime.io/CVE-2026-114662: Obot before 0.26.0 API Key Theft via CLI Login Token Requesthttps://agentprime.io/advisories/CVE-2026-114662/https://agentprime.io/advisories/CVE-2026-114662/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 01:43:46 GMTCVECVE-2026-105140: Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 Race Condition Restores Revoked Group Membershiphttps://agentprime.io/advisories/CVE-2026-105140/https://agentprime.io/advisories/CVE-2026-105140/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 12:18:33 GMTCVECVE-2026-105139: Obot 0.26.0 before 0.26.2 Authorization Bypass via vMCP Profile Prompts and Resourceshttps://agentprime.io/advisories/CVE-2026-105139/https://agentprime.io/advisories/CVE-2026-105139/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 12:18:33 GMTCVECVE-2026-105138: Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry APIhttps://agentprime.io/advisories/CVE-2026-105138/https://agentprime.io/advisories/CVE-2026-105138/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 12:18:32 GMTCVECVE-2026-103758: Obot 0.21.1 through 0.24.1 Authorization Bypass via /mcp-connect-composite/ Routehttps://agentprime.io/advisories/CVE-2026-103758/https://agentprime.io/advisories/CVE-2026-103758/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 10:42:26 GMTCVECVE-2026-101065: Obot Quickstart Docker Deployment Unauthenticated Admin Accesshttps://agentprime.io/advisories/CVE-2026-101065/https://agentprime.io/advisories/CVE-2026-101065/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 20:49:56 GMTCVEcritical