CVE-2026-13350CWE-639

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create

Low · published June 25, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
18.4
In the wild
Unconfirmed
What it is

Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N
EPSS
0.00271 · 18.4th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-06-25T16:05Z
EPSS history
Timeline
  • 25 JUN 16:05Z
    Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create
    cvelistv5