Live › vulnerability › CVE-2026-57447
Go to dashboardThe Discourse Doc Categories plugin resolves linked topic titles in its documentation index without checking the viewer's permissions. A user who can edit the index topic can learn titles of private messages and restricted-category topics they cannot read.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Discourse Doc Categories plugin that use doc category index topics with links to private messages or restricted-category topics. Sites without this plugin, or without doc category index topics linking to restricted content, have little exposure. The advisory does not establish access to topic contents, only titles.
No product ranges from the sources yet.
app.yml and compare its commit against b15d4de02ad29d7c9525346afee51fef4a2c605agit -C <plugin-dir> rev-parse HEAD unknown whether a fixed release tag existsb15d4de02ad29d7c9525346afee51fef4a2c605aEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for private messages or restricted category topics without enforcing the viewer's authorization. A user who can edit the index topic can use this behavior to learn titles that the user is not authorized to view, although the advisory does not establish access to topic contents. This vulnerability is addressed by commit b15d4de02ad29d7c9525346afee51fef4a2c605a.
This page as .md · .json · in your agent: get_signal("CVE-2026-57447")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.