CERT24CVE-2026-121582 — Umami Record API Endpoint route.ts authorizationLoading data…
CERT24Threat Observatory
Period

CVE-2026-121582 — Umami Record API Endpoint route.ts authorization

A vulnerability affects Umami up to version 3.4.1 in a function of src/app/api/record/route.ts. Manipulation of the Website argument can lead to authorization bypass. The attack may be launched remotely, and the exploit has been publicly disclosed.

← Back to intelligence

CVE-2026-121582 — Umami Record API Endpoint route.ts authorization

A vulnerability affects Umami up to version 3.4.1 in a function of src/app/api/record/route.ts. Manipulation of the Website argument can lead to authorization bypass. The attack may be launched remotely, and the exploit has been publicly disclosed.