8.1High
ZTNET privilege bypass: any user can deactivate arbitrary accounts via /api/auth/user/invalidateUser
sinamics ztnet
ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support. Prior to 0.8.0, any authenticated low-privilege user can permanently deactivate another account, including an administrator, through `POST /api/auth/user/invalidateUse…