CVE-2026-58168 Details
Description
DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools is omitted from a user's grant in deeptutor/multi_user/tool_access.py. Attackers or prompt-injected content acting within a user session can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, gaining unauthorized access to sensitive deployment resources.
An authorization bypass vulnerability has been identified in DeepTutor versions prior to 1.4.10. This vulnerability allows low-privilege users to access unrestricted MCP tools. The issue arises because the 'allowed_mcp_tools' function fails to properly deny access when 'mcp_tools' is not included in a user's grant. As a result, users can invoke any available MCP tool, such as filesystem, shell, and browser servers, without authorization, potentially accessing sensitive deployment resources.
Users can upgrade to DeepTutor version 1.4.10 or later, where this vulnerability has been addressed. For those who cannot upgrade, it's recommended to manually grant specific MCP tool access to users as needed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 30, 2026CISA-ADP
Assessed Jun 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/HKUDS/DeepTutor/pull/579 | CISA-ADP | Issue TrackingVendor |
| https://github.com/HKUDS/DeepTutor/commit/90046374b3dcd4f8a866d2d64a64440bc08eb2ef | [email protected] | Source CodeVendor |
| https://github.com/HKUDS/DeepTutor/pull/579 | [email protected] | Issue TrackingVendor |
| https://github.com/HKUDS/DeepTutor/releases/tag/v1.4.10 | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/deeptutor-insecure-default-grants-unrestricted-mcp-tool-access-to-non-admin-users | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| DeepTutor | < 1.4.10 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | [email protected] |
| Jun 30, 2026 | CVE Modified | CISA-ADP |
| Jun 30, 2026 | New CVE Received | [email protected] |