Medium severity6.5NVD Advisory· Published Oct 5, 2026

CVE-2026-105681

Description

Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issue is fixed in version 6.44.1.

Affected products

Tryghost/Ghostllm-fuzzy
Range: 5.9.0 - 6.44.1

Patches

Vulnerability mechanics

References

github.com/TryGhost/Ghost/commit/405c2623ff9060295d4a87d3a0eb4ef766c8d2d3nvd
github.com/TryGhost/Ghost/pull/28297nvd
github.com/TryGhost/Ghost/releases/tag/v6.44.1nvd
github.com/TryGhost/Ghost/security/advisories/GHSA-6q6j-f24j-p477nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000