CVE-2026-5599

Published: Apr 5, 2026

Modified: Apr 6, 2026

PUBLISHED

A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.

Vendor	Product	Versions
pretix	Venueless	affected `0.0.0 - < 02b9cbe5`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.