CVE-2026-59817 Details

A vulnerability in Ghost, a Node.js content management system, was identified in versions 6.27.0 prior to 6.44.0. The issue allowed unauthenticated attackers to manipulate donation checkout metadata during the public donation process. Exploiting this vulnerability enabled attackers to obtain full paid gift memberships for a minimal payment, without exposing any customer or member data or stealing money from the site or its members. The vulnerability arose from the checkout flow not properly validating metadata, allowing for unauthorized membership gains.

Users can update to Ghost version 6.44.0, which addresses this vulnerability. For those using Docker, instructions for updating a Docker-based Ghost instance are available in the Ghost documentation. Self-hosters using Ghost-CLI can also find update instructions in the official Ghost documentation.