CVE-2026-103290
LOW
NVD
CVSS Score
3.8
Severity
LOW
Published
Oct 01, 2026
Vendor
unknown
Description
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server.