DeepTutor 1.4.10 前存在 MCP 工具授权绕过漏洞
Start here
2026年10月3日，GitHub 安全公告披露 DeepTutor 1.4.10 之前版本存在授权绕过漏洞（CVE-2026-58168）。漏洞根源在于 deeptutor/multi_user/tool_access.py 中的 allowed_mcp_tools 函数：当用户授权中省略 mcp_tools 时，该函数返回 None 而非拒绝结果，导致低权限用户可调用未受限的 MCP 工具。攻击者或用户会话中被提示注入的内容可借此枚举并调用任意已配置的 MCP 工具，包括文件系统、shell 和浏览器。
Generated by AI from reports · Updated 11 days ago
Progress timeline
- GitHub 安全公告SelectedDeepTutor versions before 1.4.10 have an MCP tool authorization bypass vulnerability
DeepTutor versions before 1.4.10 have an authorization bypass vulnerability (CVE-2026-58168), where low-privilege users can invoke unrestricted MCP tools. The cause is that the allowed_mcp_tools function in deeptutor/multi_user/tool_access.py returns None when mcp_tools is omitted from user authorization, rather than a denial result. Attackers or prompt-injected content in user sessions can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, thereby gaining unauthorized access to sensitive resources in the deployment. The advisory was added to the GitHub Advisory Database on June 30, 2026, and updated on October 2.
Related discussion
Attention trend
New sources per day
- Oct 3: 1 new sources (1 outlets, 0 accounts)
- Oct 4: 0 new sources (0 outlets, 0 accounts)
- Oct 5: 0 new sources (0 outlets, 0 accounts)
- Oct 6: 0 new sources (0 outlets, 0 accounts)
- Oct 7: 0 new sources (0 outlets, 0 accounts)
- Oct 8: 0 new sources (0 outlets, 0 accounts)
- Oct 9: 0 new sources (0 outlets, 0 accounts)
- Oct 10: 0 new sources (0 outlets, 0 accounts)
- Oct 11: 0 new sources (0 outlets, 0 accounts)
- Oct 12: 0 new sources (0 outlets, 0 accounts)
- Oct 13: 0 new sources (0 outlets, 0 accounts)
- Oct 14: 0 new sources (0 outlets, 0 accounts)