All vulnerabilities
CVE-2026-58168GHSA-jg88-rvpc-qvxjPYSEC-2026-4206

DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools

HKUDS deeptutorpipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
7.7High
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 30 Jun 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.41%Chance of exploitation activity in the next 30 days, higher than 34% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in1.4.10Fixed versionGitHub
Published30 Jun 2026Updated 15 Oct 2026CVE List

What fixes it

  • 1.4.10deeptutor, pipGitHub
  • 1.4.10DeepTutorCVE List
  • 1.4.10deeptutor, PyPIOSVpip install "deeptutor>=1.4.10"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tools is omitted from a user's grant in deeptutor/multi_user/tool_access.py. Attackers or prompt-injected content acting within a user session can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, gaining unauthorized access to sensitive deployment resources.

Text from CVE List

Affected versions 14

  • deeptutor, pip< 1.4.10GitHub
  • DeepTutoraffected: all versions before 1.4.10CVE List
  • deeptutor, PyPIfrom first release, fixed in 1.4.10OSV
  • deeptutor, PyPI1.4.0OSV
  • deeptutor, PyPI1.4.0b0OSV
  • deeptutor, PyPI1.4.1OSV
  • deeptutor, PyPI1.4.2OSV
  • deeptutor, PyPI1.4.3OSV
  • deeptutor, PyPI1.4.4OSV
  • deeptutor, PyPI1.4.5OSV
  • deeptutor, PyPI1.4.6OSV
  • deeptutor, PyPI1.4.7OSV
  • deeptutor, PyPI1.4.8OSV
  • deeptutor, PyPI1.4.9OSV

References 6