CVE-2026-70589

Received Received - Intake

Ghost CMS Subscription Offer Redemption Vulnerability

Publication date: 2026-08-04

Last updated on: 2026-08-05

Assigner: GitHub, Inc.

Description

Ghost is a Node.js content management system. From 4.22.0 until 6.54.1, a missing validation check allowed users to redeem subscription offers that were no longer active. This issue is fixed in version 6.54.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-05

Generated

2026-08-06

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-70589

Affected Vendors & Products

Vendor	Product	Version / Range
ghost	ghost	From 4.22.0 (inc) to 6.54.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-20	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

Executive Summary

This vulnerability in Ghost CMS allows users to redeem subscription offers that are no longer active due to a missing validation check. It affects versions from 4.22.0 to 6.54.0.

Detection Guidance

This vulnerability involves missing validation for inactive subscription offers in Ghost CMS versions 4.22.0 to 6.54.0. To detect it, check your Ghost CMS version with: grep -r '"version"' /path/to/ghost/install/package.json. If the version is between 4.22.0 and 6.54.0, the system is vulnerable. Additionally, review subscription logs for unauthorized redemptions of inactive offers.

Impact Analysis

An attacker could exploit this to gain unauthorized access to expired subscriptions, potentially leading to service misuse or data exposure. The impact is limited as it requires active subscription offers.

Compliance Impact

The vulnerability allows unauthorized access to subscription features, which could lead to improper handling of user data. This may violate GDPR principles like data integrity and confidentiality, and HIPAA requirements for access controls if user data is exposed or mishandled.

Mitigation Strategies

Update Ghost to version 6.54.1 or later to address the missing validation check for inactive subscription offers.

Hi! I’m here to help you understand CVE-2026-70589. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70