CVE-2026-72724

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, plugins/chat/lib/chat/onebox_handler.rb resolves Chat::Thread by route thread_id independently of the route channel_id before checking whether the user can preview the selected chat channel. An authenticated user can pair a public channel ID with a private thread ID in a /onebox.json request and obtain private thread message content. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0.

• CWE-639

• https://github.com/discourse/discourse/commit/1276d7032af8803956c74ae87ccfd976938dcd75
• https://github.com/discourse/discourse/commit/45ab6d54076de9ca4965888974d4416d5b48e83c
• https://github.com/discourse/discourse/commit/49efe1d7f098f2ce7301908815a211cc9248270f
• https://github.com/discourse/discourse/commit/dc54846f0754799591717b6018343e49524e41ce
• https://github.com/discourse/discourse/pull/42091
• https://github.com/discourse/discourse/pull/42092
• https://github.com/discourse/discourse/pull/42093
• https://github.com/discourse/discourse/pull/42094
• https://github.com/discourse/discourse/security/advisories/GHSA-8g98-fvfc-9w48

Published

Aug 10, 2026

Last Modified

Aug 11, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72719Chatwoot is a customer engagement suite. Prior to 4.9.0, Cha…6.7
• CVE-2026-7272A flaw has been found in WilliamCloudQi matlab-mcp-server up…7.3
• CVE-2026-72720Discourse is an open-source discussion platform. Prior to 20…6.4
• CVE-2026-72721Discourse is an open-source discussion platform. Prior to 20…5.3
• CVE-2026-72722Discourse is an open-source discussion platform. Prior to 20…4.3
• CVE-2026-72723Discourse is an open-source discussion platform. Prior to 20…5.3
• CVE-2026-72725Discourse is an open-source discussion platform. Prior to 20…5.4
• CVE-2026-72726Discourse is an open-source discussion platform. Prior to 20…6.5
• CVE-2026-72727Discourse is an open-source discussion platform. Prior to 02…4.8
• CVE-2026-72728Discourse is an open-source discussion platform. Prior to 20…6.3
• CVE-2026-72729Discourse is an open-source discussion platform. Prior to 20…2
• CVE-2026-7273A stack-based buffer overflow vulnerability in the CGI progr…8.8