CVE-2026-105681
Received Received - Intake

Ghost CMS Member Comment Access Control Bypass

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: GitHub, Inc.

Description
Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issue is fixed in version 6.44.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-05
Last Modified
2026-10-05
Generated
2026-10-06
AI Q&A
2026-10-05
EPSS Evaluated
N/A
NVD
CVE-2026-105681
EUVD
EUVD-2026-92772

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
TryGhost Ghost >= 5.9.0, < 6.44.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-943 The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authorization bypass in the Ghost CMS comments feature. It allows members to access comments they are not authorized to view due to improper input validation. The issue affects Ghost versions from 5.9.0 to 6.44.1 and is fixed in version 6.44.1.

Detection Guidance

To detect this vulnerability, check Ghost CMS versions between 5.9.0 and 6.44.0. Verify if unauthorized members can access comments they should not view. Review comment access logs for unusual activity or unexpected data exposure. Ensure your Ghost installation is updated to version 6.44.1 or later to mitigate the issue.

Impact Analysis

This vulnerability could lead to unauthorized access to private comments, potentially exposing sensitive information. The CVSS score of 6.5 indicates a moderate risk to data confidentiality. Attackers with member access could view comments they should not have permission to see.

Compliance Impact

This vulnerability allows unauthorized access to comments, which could expose sensitive user data. For GDPR, this may violate principles of data minimization and security. For HIPAA, if comments contain protected health information, this could lead to breaches of confidentiality.

Mitigation Strategies

Update Ghost to version 6.44.1 or later immediately to patch the authorization bypass vulnerability in the comments feature. Self-hosted users should update via Docker or Ghost-CLI using the provided documentation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-105681. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart