CVE-2026-47264

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, DetailedTagSerializer#tag_group_names returned every tag group a tag belonged to without filtering against the requesting user's visibility. With SiteSetting.tags_listed_by_group enabled, anonymous and unprivileged users hitting TagsController#info (which is exempt from requires_login) could read the names of tag groups restricted to specific user groups or non-visible categories. This issue has been patched in versions 2026.1.4, 2026.3.1, 2026.4.1, and 2026.5.0-latest.1.

• CWE-200

• https://github.com/discourse/discourse/security/advisories/GHSA-4q5q-6hh6-53x2Third Party Advisory

Published

Jun 12, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47255AgenticMail gives AI agents real email addresses and phone n…8.2
• CVE-2026-4726Denial-of-service in the XML component. This vulnerability w…7.5
• CVE-2026-47260Koel is a free, open-source music streaming solution. Prior …7.7
• CVE-2026-47261Wasmtime is a runtime for WebAssembly. In versions prior to …7.5
• CVE-2026-47262containerd is an open-source container runtime. Versions pri…5.5
• CVE-2026-47263Discourse is an open-source discussion platform. From versio…4.3
• CVE-2026-47265AIOHTTP is an asynchronous HTTP client/server framework for …7.5
• CVE-2026-47266Formie is a Craft CMS plugin for creating forms. Prior to 2.…8.7
• CVE-2026-47267Gogs is an open source self-hosted Git service. Prior to 0.1…8.3
• CVE-2026-47268Nezha Monitoring is a self-hostable, lightweight, servers an…6.4
• CVE-2026-47269pam_usb provides hardware authentication for Linux using ord…7.4
• CVE-2026-4727Denial-of-service in the Libraries component in NSS. This vu…7.5