Product
Spacebar Server contains a missing authorization vulnerability in the /channels/{channel_id}/recipients/{user_id} endpoint, allowing authenticated attackers to join private group DMs without permission.