Venueless API User Account Deletion Vulnerability
Vulnerability
A vulnerability exists in the Venueless API that allows users with 'manage users' permissions to delete user accounts in other worlds. This issue affects all versions prior to the commit 02b9cbe5.
Impact
Exploitation of this vulnerability leads to unauthorized deletion of user accounts in different worlds, causing potential loss of user data and disruption of user activities.
Remediation
The vulnerability has been patched in all commits after 02b9cbe5. Users should avoid granting privileged permissions to individuals.
Added: Apr 5, 2026, 1:19 PM
Updated: Apr 5, 2026, 1:19 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.8remediation
0.0relevance
5.3threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.