CVE-2026-103269
Received Received - Intake

Missing Authorization in Ghost CMS Exposes Gated Content

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: VulnCheck

Description
Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to (gated content).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-01
Last Modified
2026-10-01
Generated
2026-10-01
AI Q&A
2026-10-01
EPSS Evaluated
N/A
NVD
CVE-2026-103269
EUVD
EUVD-2026-90663

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
ghost ghost to 6.62.0 (exc)
tryghost ghost to 6.62.0 (exc)
tryghost ghost 6.62.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Ghost versions 5.3.0 before 6.62.0 have a missing authorization vulnerability (CWE-862) that allows an authenticated site member to read post excerpts they do not have access to, including gated content.

Detection Guidance

To detect this vulnerability, check your Ghost version. If you are running Ghost versions 5.3.0 through 6.61.x, you are vulnerable. Run the command 'ghost version' in your Ghost installation directory to verify the version.

Impact Analysis

An attacker with authenticated access could read restricted post excerpts, potentially exposing sensitive or private content meant only for authorized users.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating privacy regulations like GDPR or HIPAA if protected content is exposed.

Mitigation Strategies

Immediately update Ghost to version 6.62.0 or later. For Docker users, update the Ghost image following official documentation. Ghost-CLI users should follow the update instructions provided by Ghost.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-103269. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart