CVE-2026-58168: DeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users
DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowedmcptools function returning None instead of a denied result when mcptools is omitted from a user's grant in deeptutor/multiuser/toolaccess.py. Attackers or prompt-injected content acting within a user session can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, gaining unauthorized access to sensitive deployment resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
DeepTutorto a version that resolves this vulnerability.Fixed in 1.4.10 - Configuration
Fix the authorization bypass by updating the allowed_mcp_tools function so it returns a denied result rather than None when mcp_tools is missing from a user's grant.
DeepTutor (deeptutor/multi_user/tool_access.py) allowed_mcp_tools = Return a denied result (not None) when mcp_tools is omitted from a user's grant
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58168?
The severity of CVE-2026-58168 is high, rated at 8.8.
How do I fix CVE-2026-58168?
To fix CVE-2026-58168, upgrade DeepTutor to version 1.4.10 or higher.
What impact does CVE-2026-58168 have on user privileges?
CVE-2026-58168 allows low-privilege users to access unrestricted MCP tools due to an authorization bypass.
Is CVE-2026-58168 exploitable remotely?
Yes, CVE-2026-58168 is remotely exploitable due to the vulnerability in user access controls.
What versions of DeepTutor are affected by CVE-2026-58168?
DeepTutor versions prior to 1.4.10 are affected by CVE-2026-58168.