CVE-2026-25552

Name of the Vulnerable Software and Affected Versions Ghost CLI versions prior to 1.30.1

Description An IP spoofing issue exists that allows unauthenticated remote attackers to bypass rate-limiting controls on self-hosted instances. By manipulating the X-Forwarded-For header through a misconfigured Nginx configuration, attackers can use the $proxy add x forwarded for directive to append arbitrary values to the header chain and present a fake IP address.

Recommendations Update Ghost CLI to version 1.30.1 or later.