This vulnerability in Uncanny Automator arises from missing authorization checks, enabling attackers with limited privileges to exploit improperly configured access control mechanisms. The issue affects all versions up to 6.7.0.1. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity and requiring low privileges but no user interaction. The impact is limited to integrity, with no confidentiality or availability impact reported. No known exploits are currently in the wild, and no patch or official remediation details have been provided.

The vulnerability allows an attacker with low privileges to perform actions that should be restricted, potentially modifying data or configurations improperly due to missing authorization checks. There is no reported impact on confidentiality or availability. The medium severity rating reflects the limited scope of impact and the requirement for some level of privilege to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in Uncanny Automator to limit exposure. Monitor for vendor updates regarding patches or official mitigations.