CVE-2026-94535

Summary

The vulnerability allows authenticated users to delete other users' notifications without proper validation, enabling unauthorized data modification.

Exploitability

Exploitation requires authentication and knowledge of arbitrary notice IDs; preconditions include access to the API endpoint.

Blast radius

If exploited, this could lead to significant privacy breaches and loss of critical communication between users.

Prioritized remediation

Update to the latest version of lamp-cloud (5.10.1 or later) which includes a fix for this vulnerability.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.