CVE-2026-49141

The flaw

WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled co

What to do

Review advisory and patch per vendor guidance.

References