CVE-2026-58168 is an authorization bypass vulnerability in HKUDS DeepTutor before version 1.4.10. The root cause is that the allowed_mcp_tools function in deeptutor/multi_user/tool_access.py returns None when the mcp_tools permission is missing from a user's grant, which is interpreted as allowing access rather than denying it. This flaw permits low-privilege users or malicious prompt-injected content within a session to enumerate and invoke any MCP tool configured in the system, including powerful tools that provide filesystem, shell, and browser server capabilities. This results in unauthorized access to sensitive deployment resources. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity. No official patch or remediation level is currently documented, and no known exploits in the wild have been reported.

Exploitation of this vulnerability allows attackers or malicious content within a user session to bypass authorization controls and invoke any MCP tool configured in DeepTutor. This includes tools that provide access to the filesystem, shell, and browser servers, potentially leading to full compromise of sensitive deployment resources. The impact includes complete confidentiality, integrity, and availability loss of affected systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to DeepTutor installations to trusted users only and monitor for unusual activity related to MCP tool usage. Avoid running DeepTutor versions prior to 1.4.10 in production environments if possible.