CVE-2026-62967

Prior to version 0.8.0 , ZTNET (a ZeroTier web UI) is vulnerable to a privilege bypass in the src/pages/api/auth/user/invalidateUser.ts handler. The root cause is a missing authorization check where getServerSession verifies only the existence of a session but fails to validate that the session.u...