Medium
Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting
Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposing server configuration secrets.
Announced Source revision 1
Original source ↗CVE-2026-104417
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-104417
Ghost
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "TryGhost",
"product": "Ghost",
"versions": [
{
"status": "affected",
"version": "1.20.0",
"lessThan": "6.64.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.64.0",
"versionType": "semver"
}
],
"packageURL": "pkg:npm/ghost",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-104417
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #8002 · Revision 1
- Added to Heist Feed
- Publisher date