CVE-2026-69114 is a high-severity vulnerability in Spacebar Server before commit 8d126f4, allowing authenticated users with MANAGE_MESSAGES permission to delete arbitrary messages in other channels. This issue arises from inadequate scoping of message queries in single-delete and bulk-delete message handlers. Users of Spacebar Server should assess their exposure and verify if their instances are vulnerabl [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-05T20:17:17.770Z and has not been modified since then. The Spacebar Server before commit dcfd910 contains a missing authorization vulnerability that allows any authenticated attacker to add themselves to arbitrary group DM channels by sending a PUT request to the channels recipient endpoint without [truncated]
