CVE-2026-101266: Pretix

Low severity, CVSS 1.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps.

Affected products

• Pretix Pretix: from 0.0, before 2026.5.5 (fixed in 2026.5.5); from 2026.6.0, before 2026.6.2 (fixed in 2026.6.2); from 2026.7.0, before 2026.7.1 (fixed in 2026.7.1)

Published 2026-09-29. Last modified 2026-09-29.