CVE-2026-32244

5.3 Moyenne

Publiée le 19/05/2026 à 02:16 · Modifiée le 24/07/2026 à 15:10 · Analysée par le NVD · Source : security-advisories@github.com

Description

Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, outdated cached AI summaries can leak removed content to anonymous and unprivileged users who cannot regenerate summaries. This issue has been fixed in versions 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1. To work around this issue, restrict summary generation by tightening the allowed groups on the summarization Personas.

Traduire en français

Produits concernés

discourse
Discourse discourse

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-200
CWE-524
CWE-672

Références

https://github.com/discourse/discourse/security/advisories/GHSA-hjmg-2mww-vfvx MitigationVendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories