CVE-2026-103277

Summary

The flaw allows attackers to execute untrusted scripts in the context of an admin session via malicious oEmbed content, potentially leading to administrative access compromise.

Exploitability

Exploitation is moderately hard as it requires crafting specific oEmbed content, but preconditions include the target having the affected version installed and users being logged in.

Blast radius

If exploited, the impact is high as it could lead to full administrative access compromise, affecting the entire system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Ghost 6.34.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.