CVE-2026-57447
Received Received - Intake

Discourse Doc Categories Plugin Information Disclosure via Index Refresh

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: GitHub, Inc.

Description
Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for private messages or restricted category topics without enforcing the viewer's authorization. A user who can edit the index topic can use this behavior to learn titles that the user is not authorized to view, although the advisory does not establish access to topic contents. This vulnerability is addressed by commit b15d4de02ad29d7c9525346afee51fef4a2c605a.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-57447
EUVD
EUVD-2026-102926

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
discourse discourse-doc-categories < b15d4de02ad29d7c9525346afee51fef4a2c605a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Discourse Doc Categories plugin. It allows a user who can edit an index topic to see titles of private messages or restricted category topics without proper authorization. The issue occurs during the doc category index refresh, which resolves linked titles without checking the viewer's access rights. The vulnerability does not allow access to the full content of these topics, only their titles.

Detection Guidance

To detect this vulnerability, check if your Discourse instance uses the discourse-doc-categories plugin and verify the plugin version. Inspect the plugin's code for the presence of the fix in commit b15d4de02ad29d7c9525346afee51fef4a2c605a. Look for unauthorized access to private topic titles by reviewing logs for queries fetching topics without proper authorization checks.

Impact Analysis

If you use the Discourse Doc Categories plugin, an attacker with edit permissions could discover sensitive topic titles they are not authorized to view. This could expose private discussions or restricted content titles, potentially leading to information leaks. The impact is limited to confidentiality, as the attacker cannot access the full content of the topics.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by exposing sensitive topic titles without authorization. GDPR requires protecting personal data, and HIPAA mandates safeguarding protected health information. Unauthorized disclosure of such titles may violate these regulations, leading to legal and regulatory penalties.

Mitigation Strategies

Upgrade to the patched version of discourse-doc-categories. The vulnerability is addressed in commit b15d4de02ad29d7c9525346afee51fef4a2c605a, which modifies the index refresh logic to enforce authorization checks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57447. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart