DeepTutor versions before 1.4.10 have an MCP tool authorization bypass vulnerability

DeepTutor versions before 1.4.10 have an authorization bypass vulnerability (CVE-2026-58168), where low-privilege users can invoke unrestricted MCP tools. The cause is that the allowed_mcp_tools function in deeptutor/multi_user/tool_access.py returns None when mcp_tools is omitted from user authorization, rather than a denial result. Attackers or prompt-injected content in user sessions can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, thereby gaining unauthorized access to sensitive resources in the deployment. The advisory was added to the GitHub Advisory Database on June 30, 2026, and updated on October 2.