CVE-2026-72732

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, the discourse_templates endpoint exposed hidden tag names because DiscourseTemplates::TemplatesSerializer in plugins/discourse-templates/app/serializers/discourse_templates/templates_serializer.rb did not filter tags through the request Guardian. The serializer did not respect tag group permissions, allowing users to see tags they were not permitted to view. This issue is fixed in versions 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0.

• CWE-862

• https://github.com/discourse/discourse/commit/25e9d55b4c652b8dc1c90f44c40c8f3fec77748c
• https://github.com/discourse/discourse/commit/c9b431b3b75727f7132ec231142371d203a6124b
• https://github.com/discourse/discourse/commit/f216f258bd473e6299c6aef7b6130e7db90116c0
• https://github.com/discourse/discourse/commit/f41e71b645eb60cc263e7a1de22251028115abf1
• https://github.com/discourse/discourse/security/advisories/GHSA-xrgc-52m8-82hm

Published

Aug 10, 2026

Last Modified

Aug 10, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72727Discourse is an open-source discussion platform. Prior to 02…4.8
• CVE-2026-72728Discourse is an open-source discussion platform. Prior to 20…6.3
• CVE-2026-72729Discourse is an open-source discussion platform. Prior to 20…2
• CVE-2026-7273A stack-based buffer overflow vulnerability in the CGI progr…8.8
• CVE-2026-72730Discourse is an open-source discussion platform. Prior to 20…8.7
• CVE-2026-72731Discourse is an open-source discussion platform. From 2026.1…7.1
• CVE-2026-72733Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72734Dokploy is a free, self-hostable Platform as a Service (PaaS…8.4
• CVE-2026-72735Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72736Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72737Dokploy is a free, self-hostable Platform as a Service (PaaS…9.6
• CVE-2026-72738Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9