Medium severity6.5NVD Advisory· Published Oct 1, 2026

CVE-2026-103289

Description

Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resulting in disclosure of restricted comment data.

Affected products

Ghostty/Ghosttyllm-fuzzy
Range: <6.44.1

Patches

Vulnerability mechanics

References

github.com/TryGhost/Ghost/security/advisories/GHSA-6q6j-f24j-p477nvd
www.vulncheck.com/advisories/ghost-5.9.0-before-6.44.1-authorization-bypass-via-commentsnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000