CVE-2026-73211

PeerTube (ActivityPub-federated video platform) pre-8.1.6 is affected by an unauthenticated remote SQL injection in ActorFollowModel.updateScore(), where the attacker-controlled inboxUrl is interpolated into an SQL query. This allows reading and writing of database tables, including oAuthToken.ac...