CVE-2026-85395CWE-862broken-access-control

CVE-2026-85395

High · published September 3, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minimal admin privileges can create OAuth API integrations, mint client credentials, and escalate permissions by exploiting missing authorization validation in the Bouncer middleware.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00417 · 34.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-09-03T23:17Z
References (7)
https://github.com/geo-chen/oss/blob/main/unopim.md · [email protected]https://github.com/unopim/unopim · [email protected]https://github.com/unopim/unopim/blob/v2.1.2/packages/Webkul/User/src/Http/Middleware/Bouncer.php · [email protected]https://github.com/unopim/unopim/commit/acbf2e160ced78446d6e4267e89f264bf04612c4 · [email protected]https://github.com/unopim/unopim/releases/tag/v2.1.3 · [email protected]https://www.vulncheck.com/advisories/unopim-before-2.1.3-missing-authorization-on-integration-management-routes · [email protected]https://github.com/geo-chen/oss/blob/main/unopim.md · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 0%
    epss
  • 03 SEP 18:54Z
    UnoPim before 2.1.3 Missing Authorization on Integration Management Routes
    cvelistv5