LinkedIn · Report #3604288
Access to Deactivated LinkedIn Company Pages via Competitor Analytics API
Validstatus
mediumseverity
77upvotes
24 Mar 2026disclosed
Summary
A vulnerability exists in LinkedIn's Competitor Analytics API that allows authenticated users to access analytics data for deactivated company pages.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.