CVE-2026-70593

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-70593

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-70593.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-70593

Aliases

Published

2026-08-04T21:49:49.968Z

Modified

2026-08-17T08:10:30.757417724Z

Severity

6.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L CVSS Calculator

Summary

Ghost: Theme Upload Path Traversal

Details

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBase and theme storage name handling. This issue is fixed in version 6.54.1.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/70xxx/CVE-2026-70593.json"
}

References

Affected packages

Git / github.com/tryghost/ghost

Affected ranges

Type

GIT

Repo

https://github.com/tryghost/ghost

Events

Introduced

d56734d71119553ee661b00c08e3e192fc52f826

Fixed

fbaa92327e52607036a1e42204c9eadcc751d82c

Fixed

94e25d9de158bc10b6a74d9aad75944b1a68ee13

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0.10.0"
        },
        {
            "fixed": "6.54.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-70593.json"