CVE-2026-105140 | obot-platform Obot up to 0.25.5/0.26.0 Auth Provider Group Refresh race condition

October 7, 2026 Yanac

A vulnerability, which was classified as critical, was found in obot-platform Obot up to 0.25.5/0.26.0. Affected by this issue is some unknown functionality of the component Auth Provider Group Refresh. Executing a manipulation can lead to race condition.

This vulnerability is handled as CVE-2026-105140. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More