CVE-2026-13350: Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create

Low severity · published Jun 25, 2026

CVE-2026-13350

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create

2.3

CVSS

0.3%

EPSS

On KEV

Description

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 19% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

0.0.0 before 0a35457f · source: vendor

Affected product

Venueless

pretix

References