# Users unexpectedly added to direct messages

**URL:** https://meta.discourse.org/t/users-unexpectedly-added-to-direct-messages/245696
**Category:** Support
**Created:** [November 15, 2022, 8:19pm UTC](https://meta.discourse.org/t/users-unexpectedly-added-to-direct-messages/245696 "2022-11-15T20:19:47Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [November 15, 2022, 8:56pm UTC](https://meta.discourse.org/t/users-unexpectedly-added-to-direct-messages/245696/2 "2022-11-15T20:56:23Z")

</div>

I believe that has been reported and fixed. If you update to Latest it should sort everything out. 👍

> [@Users randomly added to private messages (including messages from System)](https://meta.discourse.org/t/users-randomly-added-to-private-messages-including-messages-from-system/245511/2):
>
> That’s this issue [Invitation can cause users to be erroneously and transparently added to private message · Advisory · discourse/discourse · GitHub](https://github.com/discourse/discourse/security/advisories/GHSA-gh5r-j595-qx48) It has been addressed in version 2.9.0 beta 12 which has been released earlier today, so upgrading would resolve this. The update also contains code that removes the users from the PM’s again.

---

_[View the full topic](https://meta.discourse.org/t/users-unexpectedly-added-to-direct-messages/245696)._