Threat Intelligence Database

deeptutor version 1.4.0 contains a code injection vulnerability in the ExecTool.execute function. This flaw allows a remote attacker to execute arbitrary shell commands on the service environment via the live tutorbot WebSocket interface. No patch or remediation information is currently available.

deeptutor version 1.4.0 has a path traversal vulnerability in the EditFileTool.execute function. This flaw allows a remote attacker, via the live tutorbot WebSocket interface, to write or modify files at arbitrary absolute paths outside the intended bot workspace.

deeptutor version 1.4.0 has an authorization bypass vulnerability in the TutorBotManager.write_bot_file function. This flaw allows a remote attacker to enumerate bot IDs and overwrite whitelisted control files of other bots via the HTTP tutorbot file route.

deeptutor version 1.4.0 has an authorization bypass vulnerability in the TurnRuntimeManager.regenerate_last_turn function. This flaw allows a remote attacker to use a user-controlled object identifier to enumerate or obtain another user's session_id and trigger regeneration on that session. No CVSS score is available for this vulnerability.

DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow. An unauthenticated or unauthorized caller can reuse a publicly exposed book_id to submit a confirm-proposal request for an existing book, causing unauthorized overwrites of persisted metadata and spine content.

DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools is omitted from a user's grant in deeptutor/multi_user/tool_access.py. Attackers or prompt-injected content acting within a user session can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, gaining unauthorized access to sensitive deployment resources.