Ghost · Ghost · CVE-2026-103284
**Name of the Vulnerable Software and Affected Versions**
Ghost versions 5.125.1 through 6.57.0
**Description**
An information disclosure issue exists in the Admin Feedback endpoint. Staff users with limited privileges can query this endpoint to retrieve sensitive member data because the system fails to perform proper authorization checks.
**Recommendations**
Update Ghost to version 6.57.1 or later.
Restrict access to the Admin Feedback endpoint for staff users with low privilege levels as a temporary mitigation.