Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs

🗓️ 01 Oct 2026 16:38:37Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 1 Views

Authorization bypass in Nautobot approval workflow REST API allows unauthorized job activation.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-83805	23 Sep 202612:31	–	circl
CVE	CVE-2026-83805	22 Sep 202619:47	–	cve
Cvelist	CVE-2026-83805 Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs	22 Sep 202619:47	–	cvelist
EUVD	EUVD-2026-84815	22 Sep 202619:47	–	euvd
Github Security Blog	Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs	22 Sep 202620:37	–	github
NVD	CVE-2026-83805	22 Sep 202620:17	–	nvd
OSV	GHSA-Q4C5-2J6F-R476 Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs	22 Sep 202620:37	–	osv
OSV	PYSEC-2026-4111 Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs	1 Oct 202616:38	–	osv
Positive Technologies	PT-2026-97023	22 Sep 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-83805: Improper Authorization	22 Sep 202600:00	–	rapid7

Vulners

Node

pypi nautobotRange3.0.0–3.1.8

Source	Link
github	www.github.com/nautobot/nautobot/security/advisories/GHSA-q4c5-2j6f-r476
github	www.github.com/nautobot/nautobot/commit/8682707d0391cbfd7694e3276127b78dc9cf29d8
github	www.github.com/nautobot/nautobot
github	www.github.com/nautobot/nautobot/releases/tag/v3.1.8
pypi	www.pypi.org/project/nautobot
github	www.github.com/advisories/GHSA-q4c5-2j6f-r476
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-83805

01 Oct 2026 17:10Current

6Medium risk

Vulners AI Score6

CVSS 3.16.4

EPSS0.0022

SSVC