CVE-2026-58168: DeepTutor Authorization Bypass Vulnerability Allows Non-Admin Users to Invoke Unrestricted Tools
Summary
CVE-2026-58168: DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools. Affects deeptutor versions < 1.4.10. Fixed in 1.4.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
DeepTutor is an open-source educational tool designed to facilitate interactive learning experiences. It allows multiple users to access various tools for enhanced educational engagement. However, a critical vulnerability has been identified in versions prior to 1.4.10, which compromises the security of user sessions and allows unauthorized access to sensitive tools.
Vulnerability Detail
DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools. This occurs because the allowed_mcp_tools function returns None instead of a denied result when mcp_tools is omitted from a user's grant in deeptutor/multi_user/tool_access.py. As a result, attackers or prompt-injected content can enumerate and invoke any configured MCP tool, including filesystem, shell, and browser servers, leading to unauthorized access to sensitive deployment resources. The CVSS score for this vulnerability is 8.8, indicating a high severity level.
How To Fix
Latest published version: 1.6.15 as of 22 Oct 2026
pip install --upgrade "deeptutor==1.6.15"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.4.10
This is the first release that contains the fix.
pip install --upgrade "deeptutor==1.4.10"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to MCP tools by modifying user permissions in the configuration files until the package is updated. Ensure that only authorized users have access to sensitive tools.
Conclusion
The authorization bypass vulnerability in DeepTutor allows unauthorized access to sensitive tools, posing significant security risks. It is crucial to update to version 1.4.10 or later to mitigate these risks effectively. Implementing temporary workarounds can help secure your application until the update is applied.
See every vulnerability recorded for deeptutor →
FAQ
The vulnerability allows low-privilege users to access unrestricted MCP tools due to an authorization bypass.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without needing to sign up.
MCP tools are various tools that can be invoked within the DeepTutor environment, including filesystem and shell access tools.
You should implement temporary access restrictions to sensitive tools until you can update to the patched version.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
