CVE-2026-70593CWE-22path-traversal

CVE-2026-70593

Medium · published August 5, 2026

CVSS v3.1
6.6
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBase and theme storage name handling. This issue is fixed in version 6.54.1.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-05T02:17Z
References (3)
https://github.com/TryGhost/Ghost/commit/fbaa92327e52607036a1e42204c9eadcc751d82c · [email protected]https://github.com/TryGhost/Ghost/releases/tag/v6.54.1 · [email protected]https://github.com/TryGhost/Ghost/security/advisories/GHSA-cjc9-q5gf-327p · [email protected]
EPSS history
Timeline
  • 04 AUG 21:49Z
    Ghost: Theme Upload Path Traversal
    cvelistv5