CVE-2026-104412
Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment
- State
- Published
- Severity
- 5.3 Medium
- Published
- Oct 2, 2026
- Updated
- Oct 6, 2026
- Reserved
- Oct 2, 2026
Description
Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lacking permission to do so. An authenticated Editor or Super Editor can promote Author and Contributor users to Editor or Super Editor.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | VulnCheck |
Weaknesses
- CWE-269 Improper Privilege Management
Affected Products
| Product | Versions |
|---|---|
GhostTryGhost |
|
References
- GitHub Security Advisory (GHSA-4pvx-fwjj-8gpc)vendor-advisory
- VulnCheck Advisory: Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignmentthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.