CVE-2026-104412

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-104412

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104412.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-104412

Aliases

GHSA-4pvx-fwjj-8gpc

Published

2026-10-02T11:37:56Z

Modified

2026-10-04T02:46:33Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Ghost 0.5.0 before 6.64.0 Privilege Escalation via Staff Role Assignment

Details

Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lacking permission to do so. An authenticated Editor or Super Editor can promote Author and Contributor users to Editor or Super Editor.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-269"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104412.json"
}

References

Affected packages

Git / github.com/tryghost/ghost

Affected ranges

Type

GIT

Repo

https://github.com/tryghost/ghost

Events

Introduced

3478aa3a926ed8eadc9599ce9e97db0aa6fc6f70

Fixed

2fa451a7dca010016608065ad33bcc58c0043070

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0.5.0"
        },
        {
            "fixed":  "6.64.0"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104412.json"