Is CVE-2026-69114 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-69114?

CVE-2026-69114 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-69114

Description

Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queries to the requested channel. Authenticated users with MANAGE_MESSAGES permission in any controlled channel can delete arbitrary messages in other channels by routing delete requests through their own channel.