Account Hijacking Vulnerability in Pretix Ordering System

CVE-2026-101268

What is CVE-2026-101268?

This vulnerability allows an attacker to potentially gain access to a victim's account by tricking them into clicking a specially crafted link. When the victim interacts with this link while logged into the attacker's customer account, their order details may inadvertently be stored in the attacker's account. This exploit is particularly impactful when the malicious event occurs on a domain different from the organizer's page, making it crucial for users to remain vigilant about the links they click.

References