{"id":"CVE-2026-103288","kind":"vulnerability","aliases":["CVE-2026-103288","GHSA-qrh6-cwg3-343x"],"related":[],"title":"Ghost: Authorization Bypass in Comment Like Feature","description":"### Impact\n\nAn input validation issue allowed members to delete comment likes / dislikes that they were not authorized to delete.\n\n### Vulnerable versions\n\nThis vulnerability is present in Ghost from v5.9.0 up to v6.44.1.\n\n### Patches\n\nv6.44.1 contains a fix for this issue.\n\n### How to update\n\nFor self-hosters using Docker, find [Docker's official Ghost image here](https://hub.docker.com/_/ghost). Updating a Docker-based Ghost instance [is documented here](https://docs.ghost.org/install/docker#updating-ghost).\n\nIf your Ghost is a Ghost-CLI install see our documentation on [updating it to the latest version here](https://docs.ghost.org/update).\n\n\n### References\n\nGhost thanks [Adel Assakaf](https://github.com/assakafpix) and [Arthur Gurunlian](https://github.com/Buggs777) as well as Geoffrey Diederichs of [Escape](https://escape.tech/) for disclosing this vulnerability responsibly.\n\n### For more information\n\nIf you have any questions or comments about this advisory, email us at [security@ghost.org](mailto:security@ghost.org).","summary":"Ghost versions 5.9.0 through 6.44.1 have an input validation flaw that lets members delete comment likes and dislikes belonging to other users. The sources describe the impact as limited to deleting those reactions, not running code or reading data.","severity":"high","cvss":7.1,"epss":0.00203,"exploited":false,"exploited_at":null,"products":[{"name":"ghost","fixed":["6.44.1"],"affected":">= 5.9.0, < 6.44.1","ecosystem":"npm"}],"ecosystems":["npm"],"tags":["cwe-943","ghost","nodejs","runtime","self-hosted"],"not_affected_if":["default-config","managed-hosting"],"how_to_check":"- Run `ghost version` in the Ghost-CLI install directory, or check the image tag for the Docker install, and confirm the version is below `6.44.1`\n- Check the `ghost` entry in `package.json` or the lockfile for a version in the range `>= 5.9.0, < 6.44.1`","fix":"- Update Ghost to `6.44.1` or later\n- For Docker, pull the official `ghost` image at `6.44.1` or later and recreate the container, following https://docs.ghost.org/install/docker#updating-ghost\n- For Ghost-CLI installs, update following https://docs.ghost.org/update","status":"open","published_at":"2026-10-01T11:17:25+00:00","first_seen_at":"2026-10-27T14:47:35+00:00","triaged_at":"2026-10-27T14:49:35+00:00","updated_at":"2026-10-27T15:02:22+00:00","category":"runtime","confidence":0.8,"triage":{"at":"2026-10-27T14:49:35Z","model":"claude-haiku-5-5","output":{"fix":"- Update Ghost to `6.44.1` or later\n- For Docker, pull the official `ghost` image at `6.44.1` or later and recreate the container, following https://docs.ghost.org/install/docker#updating-ghost\n- For Ghost-CLI installs, update following https://docs.ghost.org/update","reach":"internet","title":"Ghost: members can delete comment likes they do not own","impact":"low","summary":"Ghost versions 5.9.0 through 6.44.1 have an input validation flaw that lets members delete comment likes and dislikes belonging to other users. The sources describe the impact as limited to deleting those reactions, not running code or reading data.","category":"runtime","nicknames":[],"who_cares":["ghost","self-hosted","nodejs"],"confidence":0.8,"needs_auth":"yes","worst_case":"A member deletes other members' comment likes and dislikes","analyst_note":"","how_to_check":"- Run `ghost version` in the Ghost-CLI install directory, or check the image tag for the Docker install, and confirm the version is below `6.44.1`\n- Check the `ghost` entry in `package.json` or the lockfile for a version in the range `>= 5.9.0, < 6.44.1`","needs_analyst":false,"not_affected_if":["managed-hosting","default-config"],"who_is_affected":"Self-hosted Ghost instances in the affected range that have member accounts able to like or dislike comments are exposed. Sites on Ghost(Pro) managed hosting are handled by the vendor, and sites with no member comment reactions in use have less reason to worry.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00066,"input_tokens":3654,"output_tokens":589,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-103288':10A,18A '-2026':9A,17A '-943':21B '/)':185C '/_/ghost).':125C '/assakafpix)':169C '/buggs777)':175C '/install/docker#updating-ghost).':138C '/update).':161C '343x':15A '5.9.0':30B '6.44.1':32B 'adel':165C 'advisori':203C 'allow':72C 'arthur':171C 'assakaf':166C 'author':2A,83C 'base':130C 'belong':46B 'bypass':3A 'cli':146C 'code':63B 'comment':5A,42B,76C,200C 'contain':101C 'cve':8A,16A 'cwe':20B 'cwg3':14A 'data':66B 'delet':41B,58B,75C,85C 'describ':52B 'diederich':180C 'disclos':187C 'dislik':45B,78C 'docker':115C,117C,129C 'docker-bas':128C 'docs.ghost.org':137C,160C 'docs.ghost.org/install/docker#updating-ghost).':136C 'docs.ghost.org/update).':159C 'document':134C,150C 'email':204C 'escap':182C 'escape.tech':184C 'escape.tech/)':183C 'featur':7A 'find':116C 'fix':103C 'flaw':37B 'geoffrey':179C 'ghost':1A,19A,22B,28B,93C,120C,131C,141C,145C,163C 'ghost-c':144C 'ghsa':12A 'ghsa-qrh6-cwg3-343x':11A 'github.com':168C,174C 'github.com/assakafpix)':167C 'github.com/buggs777)':173C 'gurunlian':172C 'host':27B 'hoster':113C 'hub.docker.com':124C 'hub.docker.com/_/ghost).':123C 'imag':121C 'impact':54B,67C 'inform':193C 'input':35B,69C 'instal':147C 'instanc':132C 'issu':71C,106C 'latest':156C 'let':39B 'like':6A,43B,77C 'limit':56B 'mailto':208C 'member':40B,73C 'nodej':23B 'offici':119C 'patch':99C 'present':91C 'qrh6':13A 'question':198C 'reaction':60B 'read':65B 'refer':162C 'respons':190C 'run':62B 'runtim':24B 'security@ghost.org':207C,209C 'see':148C 'self':26B,112C 'self-host':25B,111C 'sourc':51B 'thank':164C 'updat':109C,126C,152C 'us':205C 'use':114C 'user':49B 'v5.9.0':95C 'v6.44.1':98C,100C 'valid':36B,70C 'version':29B,87C,157C 'vulner':86C,89C,189C 'well':177C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted Ghost instances in the affected range that have member accounts able to like or dislike comments are exposed. Sites on Ghost(Pro) managed hosting are handled by the vendor, and sites with no member comment reactions in use have less reason to worry.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-01T11:17:25+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-qrh6-cwg3-343x","url":"https://github.com/advisories/GHSA-qrh6-cwg3-343x","severity":"medium","published_at":"2026-10-27T14:44:19+00:00","modified_at":"2026-10-27T14:44:20+00:00","first_seen_at":"2026-10-27T14:47:35+00:00","fetched_at":"2026-10-27T14:47:35+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-103288","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103288","severity":null,"published_at":"2026-10-01T11:17:25+00:00","modified_at":"2026-10-01T15:06:17+00:00","first_seen_at":"2026-10-27T15:02:22+00:00","fetched_at":"2026-10-27T15:02:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}