{"id":"EUVD-2026-90683","enisaUuid":"b3067f98-74e2-3e5c-bec4-d6f4156a198d","description":"Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.","datePublished":"Oct 1, 2026, 10:42:23 AM","dateUpdated":"Oct 1, 2026, 2:37:50 PM","baseScore":5.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-83rp-q473-j88c\nhttps://www.vulncheck.com/advisories/ghost-6.14.0-before-6.27.0-path-traversal-via-imagesize\n","aliases":"CVE-2026-103290\nGHSA-phq3-mc75-42c3\n","assigner":"VulnCheck","epss":0.28,"enisaIdProduct":[{"id":"62442b59-25fb-3c6d-af91-7951034e3070","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"6.14.0 \u003c6.27.0"}],"enisaIdVendor":[{"id":"5b01b06d-5fcf-3bda-9df0-9ddc32674a03","vendor":{"name":"TryGhost"}}],"enisaIdVulnerability":[{"id":"245e8831-ca01-3913-b1bc-0fd04077eb34","vulnerability":{"id":"CVE-2026-103290","description":"Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.","datePublished":"Oct 1, 2026, 10:42:23 AM","dateUpdated":"Oct 1, 2026, 2:37:50 PM","status":"PUBLISHED","baseScore":5.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-83rp-q473-j88c\nhttps://www.vulncheck.com/advisories/ghost-6.14.0-before-6.27.0-path-traversal-via-imagesize\n","enisa_id":"EUVD-2026-90683\n","assigner":"VulnCheck","epss":0.28,"dataProcessed":"Nov 8, 2026, 7:15:42 AM","vulnerabilityProduct":[{"id":"18be21b9-7788-3bfa-99c0-40393da8dcff","product":{"name":"Ghost","vendor":{"name":"TryGhost"}},"product_version":"6.14.0 \u003c6.27.0"}],"vulnerabilityVendor":[{"id":"20eda01a-ab4d-382f-a927-666420159f44","vendor":{"name":"TryGhost"}}]}},{"id":"24613941-6793-3638-81d1-6766b35a6f41","vulnerability":{"id":"GHSA-phq3-mc75-42c3","description":"Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.","datePublished":"Oct 1, 2026, 12:31:19 PM","dateUpdated":"Oct 1, 2026, 12:31:19 PM","baseScore":0.0,"references":"https://github.com/TryGhost/Ghost/security/advisories/GHSA-83rp-q473-j88c\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-103290\nhttps://www.vulncheck.com/advisories/ghost-6.14.0-before-6.27.0-path-traversal-via-imagesize\n","enisa_id":"EUVD-2026-90683\n","aliases":"CVE-2026-103290\nGHSA-phq3-mc75-42c3\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 2:04:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}