CVE-2026-70592: Ghost Database Backup Path Traversal Vulnerability
Summary
CVE-2026-70592: Ghost: Database Backup Path Traversal. Affects ghost versions >= 1.20.1, < 6.54.1. Fixed in 6.54.1. How to fix ↓
Also tracked for
- ghost · npm
The same CVE-2026-70592 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghost is a popular open-source Node.js content management system designed for professional publishing. It allows users to create and manage blogs and websites with ease, offering features like a customizable editor, themes, and plugins. However, versions 1.20.1 to 6.54.1 are vulnerable to a path traversal issue that can be exploited by an Administrator-level user.
Vulnerability Detail
The vulnerability arises from the database export endpoint in Ghost, which fails to properly validate the filename provided by the user. This oversight allows an Administrator-level user to include path separators in the filename, potentially overwriting critical files on the server's filesystem. The consequences of this vulnerability include integrity and availability issues, as unauthorized file modifications can disrupt the functioning of the application and compromise data integrity.
How To Fix
Minimum fixed version
6.54.1
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the database export functionality for Administrator-level users until the package is updated. This can be done by modifying user roles and permissions in the Ghost admin settings.
Conclusion
CVE-2026-70592 presents a significant risk to Ghost installations between versions 1.20.1 and 6.54.1, allowing for potential file overwrites by Administrator-level users. It is crucial to update to version 6.54.1 or later to mitigate this risk and ensure the integrity of your application.
See every vulnerability recorded for ghost →
FAQ
CVE-2026-70592 is a vulnerability in the Ghost content management system that allows an Administrator-level user to overwrite files on the server through a path traversal exploit.
Versions 1.20.1 to 6.54.1 of Ghost are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The vulnerability can lead to integrity and availability issues, as unauthorized file modifications can disrupt the application and compromise data integrity.
Yes, the vulnerability is fixed in Ghost version 6.54.1. It is recommended to update to this version or later.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghost.
