---
id: "CVE-2026-103288"
kind: "vulnerability"
aliases: ["CVE-2026-103288", "GHSA-qrh6-cwg3-343x"]
title: "Ghost: Authorization Bypass in Comment Like Feature"
severity: "high"
cvss: 7.1
epss: 0.00203
exploited: false
status: "open"
category: "runtime"
products: [{"name": "ghost", "fixed": ["6.44.1"], "affected": ">= 5.9.0, < 6.44.1", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["cwe-943", "ghost", "nodejs", "runtime", "self-hosted"]
not_affected_if: ["default-config", "managed-hosting"]
published_at: "2026-10-01T11:17:25+00:00"
first_seen_at: "2026-10-27T14:47:35+00:00"
updated_at: "2026-10-27T15:02:22+00:00"
sources: [{"source": "ghsa", "url": "https://github.com/advisories/GHSA-qrh6-cwg3-343x", "first_seen_at": "2026-10-27T14:47:35+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103288", "first_seen_at": "2026-10-27T15:02:22+00:00"}]
---

# Ghost: Authorization Bypass in Comment Like Feature

Ghost versions 5.9.0 through 6.44.1 have an input validation flaw that lets members delete comment likes and dislikes belonging to other users. The sources describe the impact as limited to deleting those reactions, not running code or reading data.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:ghost affected >= 5.9.0, < 6.44.1 fixed 6.44.1

## How to check

- Run `ghost version` in the Ghost-CLI install directory, or check the image tag for the Docker install, and confirm the version is below `6.44.1`
- Check the `ghost` entry in `package.json` or the lockfile for a version in the range `>= 5.9.0, < 6.44.1`

## Fix

- Update Ghost to `6.44.1` or later
- For Docker, pull the official `ghost` image at `6.44.1` or later and recreate the container, following https://docs.ghost.org/install/docker#updating-ghost
- For Ghost-CLI installs, update following https://docs.ghost.org/update

## Timeline

- 2026-10-27T14:47:35+00:00 ghsa https://github.com/advisories/GHSA-qrh6-cwg3-343x
- 2026-10-27T15:02:22+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103288

## From the sources

### Impact

An input validation issue allowed members to delete comment likes / dislikes that they were not authorized to delete.

### Vulnerable versions

This vulnerability is present in Ghost from v5.9.0 up to v6.44.1.

### Patches

v6.44.1 contains a fix for this issue.

### How to update

For self-hosters using Docker, find [Docker's official Ghost image here](https://hub.docker.com/_/ghost). Updating a Docker-based Ghost instance [is documented here](https://docs.ghost.org/install/docker#updating-ghost).

If your Ghost is a Ghost-CLI install see our documentation on [updating it to the latest version here](https://docs.ghost.org/update).


### References

Ghost thanks [Adel Assakaf](https://github.com/assakafpix) and [Arthur Gurunlian](https://github.com/Buggs777) as well as Geoffrey Diederichs of [Escape](https://escape.tech/) for disclosing this vulnerability responsibly.

### For more information

If you have any questions or comments about this advisory, email us at [security@ghost.org](mailto:security@ghost.org).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_