CVEvulnerability
CVE-2026-85395
7.1 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2026-09-03
- Last modified
- 2026-09-23
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 7.1 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
- Weaknesses
- CWE-862
Description
UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minimal admin privileges can create OAuth API integrations, mint client credentials, and escalate permissions by exploiting missing authorization validation in the Bouncer middleware.
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://github.com/geo-chen/oss/blob/main/unopim.md github.com
- https://github.com/unopim/unopim github.com
- https://github.com/unopim/unopim/blob/v2.1.2/packages/Webkul/User/src/Http/Middleware/Bouncer.php github.com
- https://github.com/unopim/unopim/commit/acbf2e160ced78446d6e4267e89f264bf04612c4 github.com
- https://github.com/unopim/unopim/releases/tag/v2.1.3 github.com
- https://www.vulncheck.com/advisories/unopim-before-2.1.3-missing-authorization-on-integration-management-routes www.vulncheck.com
- https://github.com/geo-chen/oss/blob/main/unopim.md github.com