CVE-2026-85395 Details
Description
UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minimal admin privileges can create OAuth API integrations, mint client credentials, and escalate permissions by exploiting missing authorization validation in the Bouncer middleware.
A vulnerability exists in UnoPim versions prior to 2.1.3, where the application fails to properly authorize integration management routes. This oversight allows admin users with minimal privileges to bypass access controls and create OAuth API integrations linked to superadmin accounts. The lack of authorization validation in the Bouncer middleware enables these users to generate client credentials and escalate permissions, gaining full access to the API.
Users can upgrade to UnoPim version 2.1.3 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 3, 2026CISA-ADP
Assessed Sep 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/geo-chen/oss/blob/main/unopim.md | CISA-ADP | ExploitTechnical Analysis |
| https://github.com/geo-chen/oss/blob/main/unopim.md | [email protected] | ExploitTechnical Analysis |
| https://github.com/unopim/unopim | [email protected] | Vendor |
| https://github.com/unopim/unopim/blob/v2.1.2/packages/Webkul/User/src/Http/Middleware/Bouncer.php | [email protected] | Source CodeVendor |
| https://github.com/unopim/unopim/commit/acbf2e160ced78446d6e4267e89f264bf04612c4 | [email protected] | Source CodeVendor |
| https://github.com/unopim/unopim/releases/tag/v2.1.3 | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/unopim-before-2.1.3-missing-authorization-on-integration-management-routes | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| UnoPim | >= 0, < 2.1.3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 5, 2026 | CVE Modified | CISA-ADP |
| Sep 3, 2026 | New CVE Received | [email protected] |