{"id":"CVE-2026-103277","published":"2026-10-01T11:17:23.403","lastModified":"2026-10-01T15:06:17.330","description":"Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers can craft malicious oEmbed content to execute scripts in the context of a staff user's admin session, potentially compromising administrative access.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-8vhf-xxpj-4qrg","tags":[]},{"url":"https://www.vulncheck.com/advisories/ghost-2.5.0-before-6.34.0-untrusted-script-execution-via-oembed","tags":[]}],"exploitRefs":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-8vhf-xxpj-4qrg","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows attackers to execute untrusted scripts in the context of an admin session via malicious oEmbed content, potentially leading to administrative access compromise.","exploitability":"Exploitation is moderately hard as it requires crafting specific oEmbed content, but preconditions include the target having the affected version installed and users being logged in.","blast_radius":"If exploited, the impact is high as it could lead to full administrative access compromise, affecting the entire system.","remediation":"Upgrade to Ghost 6.34.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","admin","vulnerability"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-05T08:44:02.776Z"}}