CyberRota Analysis
AI-GeneratedDiscourse's SiteSerializer component is vulnerable, allowing unauthenticated users to access restricted tag names and descriptions via the /site.json endpoint, bypassing visibility filters. This could lead to the exposure of sensitive information related to category permissions. Organizations using affected versions should prioritize updating to versions 2026.1.6, 2026.5.2, 2026.6.1, or 2026.7.0 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, SiteSerializer.anonymous_default_navigation_menu_tags serializes tags from SiteSetting.default_navigation_menu_tags without applying DiscourseTagging.filter_visible for the anonymous viewer. An unauthenticated user can retrieve restricted tag names and descriptions through /site.json when those tags are limited by inaccessible categories, category tag groups, or tag-group permissions. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0.