CVE-2026-5599

A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.

rami.io·CWE-653·Published 2026-04-05

CVSS

—

EPSS

0.00

KEV

Exploits

cve.orgen

138 chars

A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.

NVDen

138 chars

A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds.

NVDes

160 chars

Un usuario con acceso a la API y permiso de 'gestionar usuarios' en cualquier mundo sin sede puede activar la eliminación de cuentas de usuario en otros mundos.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
4.0	Primary	cve.org	7.3	—	—	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H
4.0	Secondary	NVD	7.3	—	—