Medium severity5.3NVD Advisory· Published Oct 1, 2026

CVE-2026-103274

Description

Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.

Affected products

Ghostty/Ghosttyllm-fuzzy
Range: <6.58.0

Patches

Vulnerability mechanics

References

github.com/TryGhost/Ghost/security/advisories/GHSA-5ppm-p957-x46rnvd
www.vulncheck.com/advisories/ghost-5.3.0-before-6.58.0-unauthenticated-comment-readnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000