CVE-2025-48133: Uncannyowl Uncanny Automator

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through <= 6.4.0.2.

Affected products

• Uncannyowl Uncanny Automator: before 6.5.0 (fixed in 6.5.0)

Published 2025-06-05. Last modified 2026-06-17.