A vulnerability was discovered in Shopify's Partner invitation process that allows unauthorized access to accounts without email verification. The report demonstrates how a staff member could view invited owners' email addresses, create accounts with those credentials, and gain elevated privileges …