Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

Ghost CMS: Unauthorized Access to Admin Endpoints

CVE-2026-22595 · published 9 months ago
Summary

Ghost's content management system had a security issue in certain versions that allowed authorized users to access areas they shouldn't. This could have allowed external systems to gain elevated access to the system. Patching to the latest version is recommended to fix this issue.

What to do
  • Update ghost-slimer ghost to version 6.11.0.
  • Update ghost-slimer ghost to version 5.130.6.
Affected software
Ecosystem VendorProductAffected versions
npm ghost-slimer ghost >= 6.0.0, <= 6.10.3
>= 5.105.0, <= 5.130.5
Fix: upgrade to 6.11.0
– ghost ghost >= 5.121.0, < 5.130.6
>= 6.0.0, < 6.11.0
cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*
Original advisory text
Ghost has Staff Token permission bypass
Ghost is a Node.js content management system. In versions 5.121.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's handling of Staff Token authentication allowed certain endpoints to be accessed that were only intended to be accessible via Staff Session authentication. External systems that have been authenticated via Staff Tokens for Admin/Owner-role users would have had access to these endpoints. This issue has been patched in versions 5.130.6 and 6.11.0.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-863Incorrect Authorization
Timeline
Published10 Jan 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-9xg7-mwmp-xmjx · GHSA
CVE-2026-22595 · NVD
CVE-2026-22595 · OSV
Track software like this
Free during beta