Missing Authorization Vulnerability in Uncanny Automator by Uncanny Owl

CVE-2026-120846

What is CVE-2026-120846?

A missing authorization issue in Uncanny Owl's Uncanny Automator plugin exposes users to potential security breaches due to improperly configured access control levels. Attackers may exploit this flaw to gain unauthorized access to sensitive features and functionalities within the plugin, which can lead to data leaks or the ability to manipulate settings without proper permissions. This vulnerability impacts versions from n/a through 7.7.1, making it crucial for users to apply necessary updates and patches to mitigate risks.

References