CVE-2026-5599

Vulnerability Description

A user with API access and "manage users" permission in any venueless
world is able to trigger deletion of user accounts in other worlds.

Published Date

April 05, 2026

Last Modified

April 07, 2026

CWE ID

CWE-653

Source

NVD