medium5.3
CVE-2026-103274
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode.
Impact
Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypassing privacy settings.
Affected products
| Product | Affected versions |
|---|---|
| Ghost Versions 5.3.0 | before 6.58.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.