CVE-2026-103269: Tryghost Ghost

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to (gated content).

Affected products

• Tryghost Ghost: from 5.3.0, before 6.62.0 (fixed in 6.62.0)

Published 2026-10-01. Last modified 2026-10-01.