HIGH8.8PyPI
GHSA-jg88-rvpc-qvxj· CVE-2026-58168, PYSEC-2026-4206DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools
Modified: 10/15/2026
package
PyPI/deeptutor
pkg:pypi/deeptutor
HIGH8.8PyPI
PYSEC-2026-4206· CVE-2026-58168, GHSA-jg88-rvpc-qvxjDeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools
Modified: 10/15/2026