CyberRota Analysis
AI-GeneratedThe vulnerability affects the Discourse open-source discussion platform, where hidden or unviewable first-post content is inadvertently exposed in the publicly accessible Q&A JSON-LD structured data. This could lead to unauthorized disclosure of sensitive information to unauthenticated users and search-engine crawlers. Organizations using affected versions should prioritize updating to the fixed releases (2026.1.6, 2026.5.2, 2026.6.1, or 2026.7.0) to mitigate potential information leaks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, hidden or otherwise unviewable first-post content was leaked as an excerpt in the publicly-served Q&A (QAPage) JSON-LD structured data, exposing it to any unauthenticated visitor and to search-engine crawlers. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0.