CVE-2026-45788

Undergoing Analysis Undergoing Analysis - In Progress

Secure Upload Exposure in Discourse via Pull Hotlinked Images

Publication date: 2026-07-09

Last updated on: 2026-07-10

Assigner: GitHub, Inc.

Description

Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, secure uploads could be exposed by pull_hotlinked_images when an attacker knew the secured upload URL and the secure_uploads site setting was enabled. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-09

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-10

EPSS Evaluated

N/A

NVD

CVE-2026-45788

Affected Vendors & Products

Vendor	Product	Version / Range
discourse	discourse	to 2026.6.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Compliance Impact

The vulnerability in Discourse prior to versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5 allows secure uploads to be exposed if an attacker knows the secured upload URL and the secure_uploads site setting is enabled.

Exposure of secure uploads could potentially lead to unauthorized access to sensitive or personal data, which may impact compliance with data protection regulations such as GDPR or HIPAA that require protection of personal and sensitive information.

However, specific impacts on compliance with these standards are not detailed in the provided information.

Executive Summary

This vulnerability affects the Discourse open-source discussion platform. Before certain fixed versions (2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5), secure uploads could be exposed if an attacker knew the secured upload URL and the secure_uploads site setting was enabled. The exposure happens through a feature called pull_hotlinked_images, which could reveal these secure uploads unintentionally.

Impact Analysis

If you are using a vulnerable version of Discourse with the secure_uploads setting enabled, an attacker who knows the URL of a secure upload could access that content without authorization. This could lead to unintended disclosure of sensitive or private files that were meant to be protected.

Mitigation Strategies

To mitigate this vulnerability, you should upgrade your Discourse installation to one of the fixed versions: 2026.6.0, 2026.5.1, 2026.4.2, or 2026.1.5.

Ensure that the secure_uploads site setting is properly configured and consider disabling it temporarily if upgrading is not immediately possible.

Hi! I’m here to help you understand CVE-2026-45788. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70