CVE-2026-32618 | Discourse up to 2026.1.2/2026.2.1 Channel Membership information disclosure

A vulnerability marked as problematic has been reported in Discourse up to 2026.1.2/2026.2.1. This affects an unknown part of the component Channel Membership Handler. Performing a manipulation results in information disclosure.

This vulnerability is reported as CVE-2026-32618. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More