PT-2026-106205

CVE-2026-105683

·

Published

2026-10-05

·

Updated

2026-10-13

Description by

CVSS 3.1
3.8
Low
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L
Name of the Vulnerable Software and Affected Versions Ghost versions 6.14.0 through 6.26.0
Description An input validation issue in this Node.js content management system may allow staff users to access local files located outside the intended data storage directories on the server.
Recommendations Update to version 6.27.0.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-35: Path Traversal: \'.../...//\'
Related identifiers
CVE-2026-105683
GHSA-83RP-Q473-J88C
BIT-GHOST-2026-103290
BIT-GHOST-2026-105683
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com