CVE-2026-103271

HIGH8.7Auth bypass

Description

Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrictions by directly querying the content API to retrieve restricted posts without authentication.

CVSS breakdown

CVSS 4.0

Attack Vector

Network

Attack Complexity

Low

Attack Requirements

None

Privileges Required

None

User Interaction

None

Confidentiality (Vulnerable System)

High

Integrity (Vulnerable System)

None

Availability (Vulnerable System)

None

Confidentiality (Subsequent System)

None

Integrity (Subsequent System)

None

Availability (Subsequent System)

None

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected products

TryGhost / Ghost4.0.0 – 6.63.0
TryGhost / Ghost6.63.0 – 6.63.0

References

VENDOR_ADVISORYhttps://github.com/TryGhost/Ghost/security/advisories/GHSA-rcx7-6m7p-xw5c
VENDOR_ADVISORYhttps://www.vulncheck.com/advisories/ghost-4.0.0-before-6.63.0-restricted-content-bypass

Updated 22m ago · 8 sources