CVE-2026-94505

Summary

The flaw allows authenticated attackers with contributor-level access or higher to delete any reusable social message, including those authored by administrators, due to improper authorization checks.

Exploitability

Exploitation is moderately easy for attackers with contributor-level access or higher, as no specific preconditions beyond authentication are required.

Blast radius

If exploited, the impact is high as it could lead to the permanent deletion of critical social media content authored by administrators or other privileged users.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 4.51 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.