CVE-2026-105683 - Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Back Back to CVE browser

LOW

Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

Published Oct 5, 2026

3.8

LOW

CVSS 3.1

EPSS 0.31%

Description

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0.

Affected products

Vendor TryGhost Product Ghost Default
unknown
Affected
- ≥ 6.14.0, < 6.27.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
TryGhost	Ghost	unknown	Affected ≥ 6.14.0, < 6.27.0

Ecosystem	Package	Introduced	Fixed
npm	ghost	6.14.0	6.27.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-35

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92775
Advisory
https://github.com/TryGhost/Ghost/commit/770d438fd9d352bbfccbe81dd890580a1d3fd6f0
x_refsource_MISC
https://github.com/TryGhost/Ghost/pull/27217
x_refsource_MISC
https://github.com/TryGhost/Ghost/releases/tag/v6.27.0
x_refsource_MISC
https://github.com/TryGhost/Ghost/security/advisories/GHSA-83rp-q473-j88c
x_refsource_CONFIRM
https://github.com/advisories/GHSA-83rp-q473-j88c
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-105683

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92775		Advisory
https://github.com/TryGhost/Ghost/commit/770d438fd9d352bbfccbe81dd890580a1d3fd6f0		x_refsource_MISC
https://github.com/TryGhost/Ghost/pull/27217		x_refsource_MISC
https://github.com/TryGhost/Ghost/releases/tag/v6.27.0		x_refsource_MISC
https://github.com/TryGhost/Ghost/security/advisories/GHSA-83rp-q473-j88c		x_refsource_CONFIRM
https://github.com/advisories/GHSA-83rp-q473-j88c		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-105683