CVE-2026-70592

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-70592

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-70592.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-70592

Aliases

Published

2026-08-04T21:41:27.338Z

Modified

2026-08-17T08:10:29.638764057Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L CVSS Calculator

Summary

Ghost: Database Backup Path Traversal

Details

Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite certain files on the filesystem through the database backup filename, leading to integrity and availability issues. The database export endpoint failed to reject path separators in the caller-supplied filename. This issue is fixed in version 6.54.1.

Database specific

{
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/70xxx/CVE-2026-70592.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/tryghost/ghost

Affected ranges

Type

GIT

Repo

https://github.com/tryghost/ghost

Events

Introduced

fe668113b1cfa8ac99352372b5a7321d9dc3a9cc

Fixed

f466c300191a609ed36c8d7c5d1e33ccd440786b

Fixed

94e25d9de158bc10b6a74d9aad75944b1a68ee13

Database specific

Show details

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.20.1"
        },
        {
            "fixed": "6.54.1"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-70592.json"