CVE-2026-55704 | Discourse up to 2026.1.5/2026.5.1/2026.6.0/2026.7.0-rc1 Group Posts information disclosure

A vulnerability described as problematic has been identified in Discourse up to 2026.1.5/2026.5.1/2026.6.0/2026.7.0-rc1. This issue affects some unknown processing of the component Group Posts. Such manipulation leads to information disclosure.

This vulnerability is referenced as CVE-2026-55704. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More