← CVE Intelligence

CVE-2026-5599

API allows deletion of users of other instance PUBLISHED

Description (CNA)

A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.

Affected (CNA)

Vendor / productVersions
pretix / Venuelessaffected 0.0.0 before 02b9cbe5

CWE

CWE-653

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.