CVE-2026-48074

OpenReception OpenReception: CVE-2026-48074 describes a cross-tenant data cleanup bug in Staff deletion. Before v1.0.6, deleting a staff member triggers an invite cleanup that removes from the central user_invite table by email without scoping to tenantId. As a result, a TENANT_ADMIN in one tenan...