TI-2026-83081 CVE-2026-119596 · GHSA-68c7-cghq-89pgMissing authorization in UNIT3D lets users download private playlistsPriority LOW 24UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows authenticated users to download other members' private playlists.CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00277 · Published 2026-10-30 · No fix listed CWE-639