🚨 CVE-2026-103256
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passwords to unvalidated hosts. Attackers with credential update permissions can modify the host field to receive account passwords at arbitrary hosts, bypassing domain validation controls.
🎖@cveNotify
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passwords to unvalidated hosts. Attackers with credential update permissions can modify the host field to receive account passwords at arbitrary hosts, bypassing domain validation controls.
🎖@cveNotify
GitHub
Wekan and Baserow Credentials Leak Account Password to Unvalidated Host via preAuthentication Hook
## Impact
The Wekan and Baserow username-and-password credentials send the account username and password, unencrypted, to a URL taken from the credential's own host field, on a path the "...
The Wekan and Baserow username-and-password credentials send the account username and password, unencrypted, to a URL taken from the credential's own host field, on a path the "...
🚨 CVE-2026-103257
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to validate resource identifiers. Attackers can craft malicious resource IDs to redirect API calls to unintended resources, allowing unauthorized access to workflows, executions, and credential secrets within the API key's scope.
🎖@cveNotify
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to validate resource identifiers. Attackers can craft malicious resource IDs to redirect API calls to unintended resources, allowing unauthorized access to workflows, executions, and credential secrets within the API key's scope.
🎖@cveNotify
GitHub
Path Traversal in the n8n Node Redirects Public API Calls to Unintended Resources
## Impact
The built-in n8n node built its Public API request paths from a caller-supplied resource id without encoding or validating it, so a crafted id could redirect the call to a different reso...
The built-in n8n node built its Public API request paths from a caller-supplied resource id without encoding or validating it, so a crafted id could redirect the call to a different reso...
🚨 CVE-2026-103258
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGrid, Freshservice, and ServiceNow nodes that allows attackers to bypass filters by breaking out of query literals. Attackers can exploit this by binding vulnerable node parameters to untrusted external input to widen single-record lookups into match-all queries, exposing bulk data including contact lists, tickets, and directory entries.
🎖@cveNotify
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGrid, Freshservice, and ServiceNow nodes that allows attackers to bypass filters by breaking out of query literals. Attackers can exploit this by binding vulnerable node parameters to untrusted external input to widen single-record lookups into match-all queries, exposing bulk data including contact lists, tickets, and directory entries.
🎖@cveNotify
GitHub
Unescaped Parameter Interpolation into Third-Party Query Languages Enables Filter Bypass and Bulk Data Disclosure
## Impact
The SendGrid, Freshservice, and ServiceNow nodes constructed third-party query or filter strings by directly interpolating bindable node parameters into DSL literals without neutralising...
The SendGrid, Freshservice, and ServiceNow nodes constructed third-party query or filter strings by directly interpolating bindable node parameters into DSL literals without neutralising...
🚨 CVE-2026-103259
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints. Attackers with resolver registration capability can capture collaborators' session tokens by setting a fallback resolver to an attacker-controlled endpoint during the account connection flow, enabling unauthorized credential access.
🎖@cveNotify
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints. Attackers with resolver registration capability can capture collaborators' session tokens by setting a fallback resolver to an attacker-controlled endpoint during the account connection flow, enabling unauthorized credential access.
🎖@cveNotify
GitHub
Dynamic Credentials Authorize Endpoint Leaks Session Token to Attacker-Controlled Resolver
## Impact
The Dynamic Credentials authorize and revoke endpoints forwarded the caller's raw session token to the configured resolver, missing the check the execution path already applied. Sinc...
The Dynamic Credentials authorize and revoke endpoints forwarded the caller's raw session token to the configured resolver, missing the check the execution path already applied. Sinc...
🚨 CVE-2026-103260
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advance waiting executions and trigger guarded actions.
🎖@cveNotify
n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume requests without verification of the requester's identity or approval permissions, allowing unauthenticated users to advance waiting executions and trigger guarded actions.
🎖@cveNotify
GitHub
Approval Bypass in the Send and Wait Node's Approve Within Chat Mode
## Impact
The approval gate in the Send and Wait node's "Approve Within Chat" mode could be bypassed: a resume request could be accepted without the verification that it came from Sl...
The approval gate in the Send and Wait node's "Approve Within Chat" mode could be bypassed: a resume request could be accepted without the verification that it came from Sl...
🚨 CVE-2026-103262
Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits, causing the application process to be killed by out-of-memory conditions.
🎖@cveNotify
Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a compressed response. Attackers can send a gzip-encoded decompression bomb that accumulates in memory without size limits, causing the application process to be killed by out-of-memory conditions.
🎖@cveNotify
GitHub
Bound the memory an HTTP client response can consume · tornadoweb/tornado@e412435
Backport for 6.5.9. On master this is ten commits; the net change is the
same, minus two things that do not exist on this branch: master's rejection
of a coroutine streaming_callback (here ...
same, minus two things that do not exist on this branch: master's rejection
of a coroutine streaming_callback (here ...
🚨 CVE-2026-103263
Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays within it. When a symlink pointing outside the static directory exists inside it, unauthenticated attackers can request it to read files such as configuration files, private keys, and application secrets accessible to the process user.
🎖@cveNotify
Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays within it. When a symlink pointing outside the static directory exists inside it, unauthenticated attackers can request it to read files such as configuration files, private keys, and application secrets accessible to the process user.
🎖@cveNotify
GitHub
web: Do not follow symlinks out of the static directory · tornadoweb/tornado@437ab5f
StaticFileHandler.validate_absolute_path checked the requested path
against the configured root using os.path.abspath, which does not
resolve symlinks. A symlink inside the static directory could t...
against the configured root using os.path.abspath, which does not
resolve symlinks. A symlink inside the static directory could t...
🚨 CVE-2026-103264
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS hosts to read device data and trigger device-scoped actions including software installation and MDM migration.
🎖@cveNotify
Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to device UUIDs. Unauthenticated attackers who know or guess these non-secret identifiers can authenticate as iOS/iPadOS hosts to read device data and trigger device-scoped actions including software installation and MDM migration.
🎖@cveNotify
GitHub
Unauthenticated iOS/iPadOS device API access via non-secret host identifiers
### Summary
Fleet's device API (`/api/v1/fleet/device/{token}/...`) supports a URL-based authentication fallback for iOS/iPadOS hosts, used by the self-service WebClip, which carries the dev...
Fleet's device API (`/api/v1/fleet/device/{token}/...`) supports a URL-based authentication fallback for iOS/iPadOS hosts, used by the self-service WebClip, which carries the dev...
🚨 CVE-2026-103265
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command payloads, and device responses.
🎖@cveNotify
Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for hosts on other teams when a shared command UUID targets hosts across multiple teams, exposing host UUIDs, command payloads, and device responses.
🎖@cveNotify
GitHub
Team-scoped users can read MDM command results for hosts on other teams via shared command UUID
### Summary
The MDM command results endpoint (`GET /api/latest/fleet/commands/results`, and its deprecated alias `GET /api/latest/fleet/mdm/commandresults`), when called without the optional `host...
The MDM command results endpoint (`GET /api/latest/fleet/commands/results`, and its deprecated alias `GET /api/latest/fleet/mdm/commandresults`), when called without the optional `host...
🚨 CVE-2026-103266
Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content into newsletters sent to the member. Depending on the recipient's email client, the injected content may be rendered, resulting in HTML injection or cross-site scripting (XSS).
🎖@cveNotify
Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existing member, modify that member's name, and inject content into newsletters sent to the member. Depending on the recipient's email client, the injected content may be rendered, resulting in HTML injection or cross-site scripting (XSS).
🎖@cveNotify
GitHub
Unauthenticated Stripe Checkout Allowed Member Account Modification and HTML Injection in Newsletters
### Impact
A malicious actor could attach a paid subscription to an existing member, modify their name, and inject content into newsletters sent to the member. Depending on the email client, mal...
A malicious actor could attach a paid subscription to an existing member, modify their name, and inject content into newsletters sent to the member. Depending on the email client, mal...
🚨 CVE-2026-103267
Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users to specify any email address when creating their account. Attackers can accept leaked invite tokens with attacker-controlled email addresses, or legitimate recipients can register with unintended email providers.
🎖@cveNotify
Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users to specify any email address when creating their account. Attackers can accept leaked invite tokens with attacker-controlled email addresses, or legitimate recipients can register with unintended email providers.
🎖@cveNotify
GitHub
Staff Could Accept Invite with any Email
### Impact
Staff invite acceptance allowed the user to specify any email address when creating their account. This could allow a leaked invite token to be accepted with an attacker-controlled em...
Staff invite acceptance allowed the user to specify any email address when creating their account. This could allow a leaked invite token to be accepted with an attacker-controlled em...
🚨 CVE-2026-103268
Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Attackers with suspended staff credentials can perform password reset operations to regain active account access and restore their original privileges.
🎖@cveNotify
Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Attackers with suspended staff credentials can perform password reset operations to regain active account access and restore their original privileges.
🎖@cveNotify
GitHub
Suspended Staff Could Reactivate Accounts with Password Reset
### Impact
A suspended staff user could reactivate their account by performing a self-service password reset. The impact of a successful exploitation depends on the original role of the suspende...
A suspended staff user could reactivate their account by performing a self-service password reset. The impact of a successful exploitation depends on the original role of the suspende...
🚨 CVE-2026-103269
Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to (gated content).
🎖@cveNotify
Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to (gated content).
🎖@cveNotify
GitHub
Missing Authorization Allowed Access to Post Excerpts for Gated Content
### Impact
A member could read excerpts for posts they did not have access to.
### Vulnerable versions
This vulnerability is present in Ghost from v5.3.0 up to v6.62.0
### Patches
v6...
A member could read excerpts for posts they did not have access to.
### Vulnerable versions
This vulnerability is present in Ghost from v5.3.0 up to v6.62.0
### Patches
v6...
🚨 CVE-2026-103271
Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrictions by directly querying the content API to retrieve restricted posts without authentication.
🎖@cveNotify
Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrictions by directly querying the content API to retrieve restricted posts without authentication.
🎖@cveNotify
GitHub
Restricted Content Bypass
### Impact
A vulnerability in the content API allowed unauthenticated visitors to leak gated post content.
### Vulnerable versions
This vulnerability is present in Ghost from v4.0.0 up to ...
A vulnerability in the content API allowed unauthenticated visitors to leak gated post content.
### Vulnerable versions
This vulnerability is present in Ghost from v4.0.0 up to ...
🚨 CVE-2026-103272
Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration vulnerability in the content API that allows unauthenticated attackers to leak user data. Attackers can observe discrepancies in API metadata responses to enumerate staff members and extract sensitive information without authentication.
🎖@cveNotify
Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration vulnerability in the content API that allows unauthenticated attackers to leak user data. Attackers can observe discrepancies in API metadata responses to enumerate staff members and extract sensitive information without authentication.
🎖@cveNotify
GitHub
Unauthenticated Staff Enumeration and Data Extraction via Blind Oracles
### Impact
A vulnerability in the content API allowed unauthenticated visitors to leak user data by observing discrepancies in metadata.
### Vulnerable versions
This vulnerability is prese...
A vulnerability in the content API allowed unauthenticated visitors to leak user data by observing discrepancies in metadata.
### Vulnerable versions
This vulnerability is prese...
🚨 CVE-2026-103273
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level.
🎖@cveNotify
Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attackers with staff credentials can leverage tokens to edit posts beyond their assigned privilege level.
🎖@cveNotify
GitHub
Staff Tokens Granted Elevated Post Privileges
### Impact
A lower-privilege staff user could bypass restrictions on editing posts by using a staff token.
### Vulnerable versions
This vulnerability is present in Ghost from v4.3.0 up to ...
A lower-privilege staff user could bypass restrictions on editing posts by using a staff token.
### Vulnerable versions
This vulnerability is present in Ghost from v4.3.0 up to ...
🚨 CVE-2026-103274
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
🎖@cveNotify
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
🎖@cveNotify
GitHub
Unauthenticated Comment Read in Private Mode
### Impact
Unauthenticated visitors were able to read comments even when private mode was enabled.
### Vulnerable versions
This vulnerability is present in Ghost from v5.3.0 up to v6.58.0....
Unauthenticated visitors were able to read comments even when private mode was enabled.
### Vulnerable versions
This vulnerability is present in Ghost from v5.3.0 up to v6.58.0....
🚨 CVE-2026-103275
Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users' password hashes from which filters match and perform offline password-guessing attacks against them.
🎖@cveNotify
Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields such as authors.password, because of an incomplete fix for CVE-2026-70590. Staff-level attackers can infer other staff users' password hashes from which filters match and perform offline password-guessing attacks against them.
🎖@cveNotify
GitHub
Fixed filter fields for bulk posts/pages requests (#30046) · TryGhost/Ghost@5ef16ab
no ref
Co-authored-by: UserExistsError <23325451+UserExistsError@users.noreply.github.com>
Co-authored-by: UserExistsError <23325451+UserExistsError@users.noreply.github.com>
🚨 CVE-2026-103276
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.
🎖@cveNotify
Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use URL encoding to bypass extension validation and access sensitive theme files.
🎖@cveNotify
GitHub
Denied Extension Bypass in Theme Serving via URL Encoding
### Impact
An unauthenticated user could read theme templates and metadata due to a bug in file extension filtering.
### Vulnerable versions
This vulnerability is present in Ghost versions...
An unauthenticated user could read theme templates and metadata due to a bug in file extension filtering.
### Vulnerable versions
This vulnerability is present in Ghost versions...
🚨 CVE-2026-103277
Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers can craft malicious oEmbed content to execute scripts in the context of a staff user's admin session, potentially compromising administrative access.
🎖@cveNotify
Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers can craft malicious oEmbed content to execute scripts in the context of a staff user's admin session, potentially compromising administrative access.
🎖@cveNotify
GitHub
Editor oEmbed Preview Allows Untrusted Script Execution
### Impact
The oEmbed preview in Ghost editor failed to sandbox externally hosted scripts, possibly resulting in compromise of a staff user's admin session.
### Vulnerable versions
Thi...
The oEmbed preview in Ghost editor failed to sandbox externally hosted scripts, possibly resulting in compromise of a staff user's admin session.
### Vulnerable versions
Thi...
🚨 CVE-2026-103278
Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through improper input validation.
🎖@cveNotify
Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publishing privileges can craft malicious pages that, when visited by active staff users, enable account takeover through improper input validation.
🎖@cveNotify
GitHub
Input Validation Issue in Admin iframe Could Result in Staff Account Takeover
### Impact
An input validation vulnerability allowed anybody with the ability to publish content on the public site to take over a staff user's account. Exploitation required an active staff...
An input validation vulnerability allowed anybody with the ability to publish content on the public site to take over a staff user's account. Exploitation required an active staff...