CVE-2026-70590

Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification should have prevented an attacker from logging in with a recovered password. Depending on the database used, leaked hashes may not have had the correct casing for all characters, increasing the difficulty of a password-guessing attack. This issue is fixed in version 6.54.1.

• CWE-200

• https://github.com/TryGhost/Ghost/commit/63c31fad7e473caa62d8fbb4651a04a2a62b5d00
• https://github.com/TryGhost/Ghost/pull/29628
• https://github.com/TryGhost/Ghost/releases/tag/v6.54.1
• https://github.com/TryGhost/Ghost/security/advisories/GHSA-jm22-3w23-5q7w

Published

Aug 4, 2026

Last Modified

Aug 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-70561TestLink 1.9.20 and prior contains an insecure direct object…7.1
• CVE-2026-7057A flaw has been found in Tenda F456 1.0.0.5. The affected el…8.8
• CVE-2026-7058A vulnerability has been found in 666ghj MiroFish up to 0.1.…7.3
• CVE-2026-70588Ghost is a Node.js content management system. From 5.26.0 un…5
• CVE-2026-70589Ghost is a Node.js content management system. From 4.22.0 un…4.8
• CVE-2026-7059A vulnerability was found in 666ghj MiroFish up to 0.1.2. Th…5.5
• CVE-2026-70591Ghost is a Node.js content management system. From 0.10.0 un…4.1
• CVE-2026-70592Ghost is a Node.js content management system. From 1.20.1 un…5.5
• CVE-2026-70593Ghost is a Node.js content management system. From 0.10.0 un…6.6
• CVE-2026-70594Ghost is a Node.js content management system. From 2.2.0 unt…6.7
• CVE-2026-70595Ghost is a Node.js content management system. From 6.26.0 un…4
• CVE-2026-70596Ghost is a Node.js content management system. From 4.9.0 unt…4.3