{"id":"CVE-2026-103271","published":"2026-10-01T11:17:22.407","lastModified":"2026-10-06T01:16:33.043","description":"Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrictions by directly querying the content API to retrieve restricted posts without authentication.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-rcx7-6m7p-xw5c","tags":[]},{"url":"https://www.vulncheck.com/advisories/ghost-4.0.0-before-6.63.0-restricted-content-bypass","tags":[]}],"exploitRefs":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-rcx7-6m7p-xw5c","tags":[]}],"hasPoc":true,"ai":{"summary":"A content API vulnerability in Ghost CMS versions 4.0.0 through 6.62.9 allows unauthenticated users to access restricted posts by directly querying the API endpoint. This bypasses the normal authentication and authorization controls that should prevent public access to gated content.","exploitability":"The vulnerability is easily exploitable with no prerequisites as attackers can directly query the content API endpoint without any authentication, making it a straightforward path to access restricted content.","blast_radius":"The impact could be significant for blogs or sites using Ghost CMS with sensitive gated content, potentially exposing confidential posts, member-only articles, or proprietary information to the public.","remediation":"Upgrade to Ghost version 6.63.0 or later to remediate this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["content-api","auth-bypass","cms","ghost"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:05:51.694Z"}}