pretalx XSS flaw lets attackers hijack conference organizer accounts, steal sessions, auto-accept talks, and demote admins. Patched in v2026.1.0.

The alert never fired. No malicious domain. No suspicious binary. No PowerShell in your logs — just a trusted Windows script, a legitimate…