CVE-2026-78203CWE-639

CVE-2026-78203

High · published August 24, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
29.6
In the wild
Unconfirmed
What it is

Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then generate reports to disclose template contents including letterhead, boilerplate, and methodology text.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00369 · 29.6th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-08-24T05:16Z
References (5)
https://github.com/GhostManager/Ghostwriter · [email protected]https://github.com/GhostManager/Ghostwriter/blob/v7.1.1/ghostwriter/reporting/views.py#L275-L315 · [email protected]https://github.com/GhostManager/Ghostwriter/commit/5b2a4a297e44c823c16f65b1ba101c742791cd0b · [email protected]https://github.com/geo-chen/oss/blob/main/Ghostwriter.md · [email protected]https://www.vulncheck.com/advisories/ghostwriter-before-cross-client-report-template-disclosure-via-unauthorized-template-swap · [email protected]
EPSS history
Timeline
  • 24 AUG 00:30Z
    Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap
    cvelistv5