CVE-2026-27454

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, requesting /posts/:id.json?version=X bypassed authorization checks on post revisions. The display_post method called post.revert_to directly without verifying whether the revision was hidden or if the user had permission to view edit history. This meant hidden revisions (intentionally concealed by staff) could be read by any user by simply enumerating version numbers. Starting in versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, Discourse looks up the PostRevision and call guardian.ensure_can_see! before reverting, consistent with how the /posts/:id/revisions/:revision endpoint already authorizes access. No known workarounds are available.

• CWE-862

• https://github.com/discourse/discourse/commit/8510fde30eb0d7f2dee822a95f6cf43b9ac943d0Patch
• https://github.com/discourse/discourse/commit/c0eeb5892f5d61ad62b057f4d468333a6e9f28c3Patch
• https://github.com/discourse/discourse/commit/c474fbd79d2bd231baafb4332970297d781f92caPatch
• https://github.com/discourse/discourse/security/advisories/GHSA-fq69-f929-wp96Vendor Advisory

Published

Mar 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-27446Missing Authentication for Critical Function (CWE-306) vulne…9.8
• CVE-2026-27447OpenPrinting CUPS is an open source printing system for Linu…6.3
• CVE-2026-27448pyOpenSSL is a Python wrapper around the OpenSSL library. St…5.3
• CVE-2026-27449Umbraco Engage is a business intelligence platform. A vulner…7.5
• CVE-2026-2745GitLab has remediated an issue in GitLab CE/EE affecting all…8.1
• CVE-2026-27452ASN.1 TypeScript ESM library, including codecs for Basic Enc…5.3
• CVE-2026-27456util-linux is a random collection of Linux utilities. Prior …4.7
• CVE-2026-27457Weblate is a web based localization tool. Prior to version 5…4.3
• CVE-2026-27458LinkAce is a self-hosted archive to collect website links. V…5.4
• CVE-2026-27459pyOpenSSL is a Python wrapper around the OpenSSL library. St…9.8
• CVE-2026-2746SEPPmail Secure Email Gateway before version 15.0.1 does not…5.3
• CVE-2026-27460Tandoor Recipes is an application for managing recipes, plan…6.5