The vulnerability in obot before v0.23.0 involves insufficient validation of URLs specified by privileged users during remote MCP server registration. This SSRF flaw enables attackers with elevated privileges to coerce the application into making requests to internal or cloud metadata endpoints. Responses from these requests may be reflected in error messages, disclosing sensitive information such as credentials. The CVSS 4.0 score is 8.3, indicating a high severity with network attack vector, low attack complexity, and high confidentiality impact.

Attackers with Power User or higher privileges can exploit this SSRF vulnerability to access internal services and cloud metadata endpoints. This can lead to disclosure of sensitive credentials and potentially compromise internal infrastructure. The vulnerability does not require user interaction and has a high confidentiality impact, though it requires elevated privileges.

A fix is available in obot version 0.23.0. Users should upgrade to version 0.23.0 or later to remediate this vulnerability. Until then, restrict Power User or higher roles to trusted personnel only and monitor for suspicious activity related to remote MCP server registration.