VULNERABILITY INTELLIGENCE

CVE-2026-70592

CVSS score5.5 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2026-08-04
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L

Description

Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite certain files on the filesystem through the database backup filename, leading to integrity and availability issues. The database export endpoint failed to reject path separators in the caller-supplied filename. This issue is fixed in version 6.54.1.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references