CVE-2026-33074 | Discourse up to 2026.1.2/2026.2.1 privileges management

March 31, 2026 Yanac

A vulnerability identified as critical has been detected in Discourse up to 2026.1.2/2026.2.1. Affected by this vulnerability is an unknown functionality. This manipulation causes improper privilege management.

This vulnerability is registered as CVE-2026-33074. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More