{"id":"CVE-2026-105642","published":"2026-10-05T19:17:18.733","lastModified":"2026-10-06T15:03:59.427","description":"Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. This issue is fixed in version 6.67.0.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp","tags":[]}],"exploitRefs":[{"url":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-788w-68h3-cvxp","tags":[]}],"hasPoc":true,"ai":{"summary":"A vulnerability in Ghost's image processing library allowed staff users to execute arbitrary commands by creating a bookmark card for an attacker-controlled website.","exploitability":"Exploitation requires a staff user with the ability to create a bookmark card, which is a moderate precondition.","blast_radius":"If exploited, this could result in full server compromise, allowing attackers to run arbitrary commands on the Ghost server.","remediation":"Upgrade to Ghost version 6.67.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","cms"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-06T08:45:07.758Z"}}