CyberRota Analysis
AI-GeneratedThe vulnerability affects the Discourse open-source discussion platform, where restricted tag and tag-group names associated with publicly readable categories can be exposed to unauthorized users via category and group endpoints. This could lead to information leakage, potentially compromising user privacy and security. Organizations using affected versions should prioritize upgrading to the patched releases (2026.6.0, 2026.5.1, 2026.4.2, or 2026.1.5) to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, restricted tag and tag-group names attached to publicly readable categories as allowed_tags, allowed_tag_groups, or required tag groups could leak to anonymous and unauthorized users through category and group endpoints. This issue is fixed in versions 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)