What is the CVSS score of CVE-2026-44785?

CVE-2026-44785 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2026-44785?

Yes, a patch is available for CVE-2026-44785. Update the affected software to the latest version immediately.

Discourse CVE-2026-44785

EUVD-2026-36557 MEDIUM

Information Exposure (CWE-200)

2026-06-12 GitHub_M

Information Disclosure Discourse

4.3

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Network-accessible feature requires only a valid user session (PR:L); limited confidentiality impact reading one hidden post; no integrity or availability consequence.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jun 12, 2026 - 22:01 EUVD

Analysis Generated

Jun 12, 2026 - 21:33 vuln.today

DescriptionCVE.org

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, the AI "explain" helper only checks can_see? on the post being explained, not its reply_to_post, so any authenticated user with access to the AI helper could read the raw contents of a hidden parent post by invoking "Explain" on a reply to it. This issue has been patched in versions 2026.1.4, 2026.3.1, 2026.4.1, and 2026.5.0-latest.1.

AnalysisAI

Discourse's AI 'explain' helper exposes raw content of hidden posts to any authenticated user with access to the feature, due to an incomplete authorization check on parent posts. Affected instances span three release tracks - 2026.1.x, 2026.3.x, and 2026.4.x - and any user who can invoke the AI helper and find a visible reply to a hidden post can silently read the hidden post's raw text. No public exploit code has been identified and EPSS places exploitation probability at 0.03% (9th percentile), indicating this is a low-urgency but genuine confidentiality bypass for deployments where hidden post content is sensitive.

Technical ContextAI

Discourse is an open-source forum platform (CPE: cpe:2.3:a:discourse:discourse) built around threaded post structures where posts can be explicitly hidden or restricted by moderators. The AI 'explain' helper is an add-on feature that sends a post's content to an AI backend to produce a plain-language explanation. The root cause is CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor): the helper applies a can_see? visibility check to the directly targeted post but fails to apply the same gate to reply_to_post - the parent post in the thread chain. When the AI feature fetches parent context for its explanation, it bypasses the visibility enforcement that governs normal post display, allowing the hidden post's raw content to surface in the AI response to an unprivileged caller.

RemediationAI

Upgrade to one of the vendor-released patches: 2026.1.4 (for 2026.1.x installations), 2026.3.1 (for 2026.3.x), 2026.4.1 (for 2026.4.x), or 2026.5.0-latest.1 for rolling-latest deployments, as confirmed by GitHub Security Advisory GHSA-7h76-fwxc-j586 at https://github.com/discourse/discourse/security/advisories/GHSA-7h76-fwxc-j586. If an immediate upgrade is not feasible, administrators should disable the AI 'explain' helper feature entirely - this eliminates the attack surface at the cost of removing the AI assistance functionality for all users. As a narrower mitigating control, restricting AI helper access to staff-level or high-trust user groups reduces the pool of potential abusers but does not eliminate the underlying authorization bypass and should be treated as a temporary measure only.