In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.
CWE-276