CVE-2024-37119 is a CWE-862 Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro, affecting versions up to 5.3.0.0. The issue arises from incorrectly configured access control security levels, which may allow unauthorized users to perform actions they should not be permitted to. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity), with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts availability only. No patch or official remediation level has been disclosed by the vendor. The product is not a cloud service, so remediation depends on vendor patch release and user application.

The vulnerability could allow an attacker to exploit missing authorization controls, potentially causing a denial of service or disruption of availability within the affected Uncanny Automator Pro plugin. There is no reported impact on confidentiality or integrity. No known exploits exist in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor Uncanny Owl's advisories for updates. Until a patch is released, consider restricting access to the plugin's administrative interfaces to trusted users only.