Which versions of UnoPim are affected by CVE-2026-85395?

UnoPim versions before 2.1.3 contain an access control flaw in integration management that allows lower-level administrators to escalate to full system administrator privileges and generate API…. A patch is available.

How to fix or mitigate CVE-2026-85395?

Within 24 hours, identify all UnoPim deployments and determine which are running versions prior to 2.1.3, with priority given to instances that support multiple admin accounts or least-privilege admin policies. Within 7 days, deploy version 2.1.3 to staging and development environments, performing functional testing of OAuth integration creation and credential management workflows. Within 30 days, complete production deployment of version 2.1.3 across all systems, audit existing OAuth integrations to identify any created by low-privilege accounts since disclosure, and review integration audit logs for unauthorized credential generation.

UnoPim CVE-2026-85395

Q: What is the CVSS score of CVE-2026-85395?

CVE-2026-85395 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-70672 HIGH

Missing Authorization (CWE-862)

2026-09-03 VulnCheck

GHSA-2mm8-ppw9-cq8r

Unopim

7.1

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.1 HIGH

Network-accessible by any low-privilege admin; C:L for credential/metadata disclosure, I:H for unauthorized OAuth credential issuance; no scope change since impact stays within the same application.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Metadata Corrected

Sep 03, 2026 - 19:40 vuln.today

tag: Authentication Bypass removed

Source Code Evidence Fetched

Sep 03, 2026 - 19:34 vuln.today

Analysis Generated

Sep 03, 2026 - 19:34 vuln.today

CVE Published

Sep 03, 2026 - 18:54 cve.org

HIGH 7.1

DescriptionCVE.org

UnoPim before 2.1.3 fails to include integration store, update, and key-generation routes in its ACL map, allowing any admin user to bypass permission checks. Attackers with minimal admin privileges can create OAuth API integrations, mint client credentials, and escalate permissions by exploiting missing authorization validation in the Bouncer middleware.

AnalysisAI

Integration management routes in UnoPim before 2.1.3 are absent from the application's ACL map, meaning the Bouncer middleware never enforces permission checks on those endpoints regardless of the authenticated admin's assigned role. Any low-privilege admin - including one restricted to dashboard-only access - can directly POST to the integration store, update, key-generation, and secret-regeneration routes to create OAuth API integrations and mint client credentials for arbitrary admin accounts, effectively escalating their permissions. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires a valid UnoPim admin-panel session - any admin role, including the minimum dashboard-only access, is sufficient. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N) scoring 7.1 accurately captures the attack profile: network-accessible, no complexity, requires only low-privilege authentication, no user interaction, primary impact is integrity (VI:H) from unauthorized OAuth credential issuance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade UnoPim to version 2.1.3 or later; this is the vendor-released patch confirmed by the GitHub release tag https://github.com/unopim/unopim/releases/tag/v2.1.3 and commit acbf2e160ced78446d6e4267e89f264bf04612c4. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all UnoPim deployments and determine which are running versions prior to 2.1.3, with priority given to instances that support multiple admin accounts or least-privilege admin policies. …

Threat intelligence, references, and detailed analysis are available after sign-in.