High severity · published Sep 3, 2026
CVE-2026-85395
UnoPim before 2.1.3 Missing Authorization on Integration Management Routes
7.1
CVSS
0.4%
EPSS
No
On KEV
Description
UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minimal admin privileges can create OAuth API integrations, mint client credentials, and escalate permissions by exploiting missing authorization validation in the Bouncer middleware.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UN
unopim · unopim
before 2.1.3 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-85395
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-85395
github.com
https://github.com/geo-chen/oss/blob/main/unopim.md
github.com
https://github.com/unopim/unopim
github.com
https://github.com/unopim/unopim/blob/v2.1.2/packages/Webkul/User/src/Http/Middleware/Bouncer.php
github.com
https://github.com/unopim/unopim/commit/acbf2e160ced78446d6e4267e89f264bf04612c4
github.com
https://github.com/unopim/unopim/releases/tag/v2.1.3
www.vulncheck.com
https://www.vulncheck.com/advisories/unopim-before-2.1.3-missing-authorization-on-integration-management-routes
More from unopim
8.8
CVE-2025-55745
UnoPim Quick Export feature is vulnerable to CSV injection
8.8
CVE-2025-55743
UnoPim vulnerable to remote code execution through Arbitrary File upload
8.1
CVE-2025-55741
unopim/unopim allows unauthorized product deletion via mass-delete endpoint
7.2
CVE-2026-82524
UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
4.8
CVE-2025-55742
UnoPim Stored XSS via SVG MIME/Sanitizer Bypass