CVE-2026-57953

Name of the Vulnerable Software and Affected Versions Mythic versions prior to 3.4.0.60

Description An authorization bypass exists that allows authenticated users with the spectator role to perform unauthorized write operations. This occurs because the 'eventing import automatic webhook' endpoint is registered under middleware that permits spectator access. An attacker with spectator privileges can exploit this misconfigured access control to create and delete automation workflows, leading to unauthorized modifications of EventGroups and operation automation configurations.

Recommendations Update to version 3.4.0.60 or later.