CVE-2026-31805

Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, an authorization bypass in the poll plugin allowed authenticated users to vote on, remove votes from, or toggle the open/closed status of polls they did not have access to. By passing post_id as an array (e.g. post_id[]=&post_id[]=), the authorization check resolves to the accessible post while the poll lookup resolves to a different post's poll. This affects the vote, remove_vote, and toggle_status endpoints in DiscoursePoll::PollsController. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch.

• CWE-20
• CWE-863

• https://github.com/discourse/discourse/commit/1a6b3cdd8939053f485a60a6ea004a40878392c4Patch
• https://github.com/discourse/discourse/security/advisories/GHSA-fgxm-prjv-g823Vendor Advisory

Published

Mar 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31799Tautulli is a Python based monitoring and tracking tool for …4.9
• CVE-2026-3180The Contest Gallery – Upload & Vote Photos, Media, Sell with…7.5
• CVE-2026-31800Parse Server is an open source backend that can be deployed …9.1
• CVE-2026-31801zot is ancontainer image/artifact registry based on the Open…7.7
• CVE-2026-31802node-tar is a full-featured Tar for Node.js. Prior to versio…5.5
• CVE-2026-31804Tautulli is a Python based monitoring and tracking tool for …5.3
• CVE-2026-31806FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2026-31807SiYuan is a personal knowledge management system. Prior to 3…6.1
• CVE-2026-31808file-type detects the file type of a file, stream, or data. …5.3
• CVE-2026-31809SiYuan is a personal knowledge management system. Prior to 3…6.1
• CVE-2026-3181Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-31812Quinn is a pure-Rust, async-compatible implementation of the…8.7