EUVD-2026-13526Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Object-level authorization, IDOR prevention
|
| Impact | The CVSS 4.0 score of 5.3 with a vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N reflects a network-accessible vulnerability with low attack complexity and low privilege requirements, but low confidentiality impact and no integrity or availability impact. The risk assessment is moderately elevated by several factors: the vulnerability requires only authentication (not a special role), the attack vector is network-based with no user interaction required, and patches are readily available from the vendor. However, the actual real-world risk remains moderate rather than critical because the disclosed information (credit allocations and usage statistics) does not directly enable lateral privilege escalation, data destruction, or system compromise. The vulnerability is most concerning in multi-tenant Discourse deployments where different organizations use the same instance, as one tenant could surveil another's AI resource consumption. For single-tenant or internally-managed instances, the risk is lower. The availability of vendor patches for three concurrent versions (2026.1.2, 2026.2.1, 2026.3.0-latest.1) suggests the vendor responded promptly, reducing the window of exposure for patched deployments. |
| Exploit ScenarioDerived | An authenticated user (such as a disgruntled employee or competitor with a free trial account) logs into a multi-tenant Discourse instance and systematically requests AI metadata endpoints with sequential or enumerated identifiers (e.g., /api/ai-personas/1, /api/ai-personas/2, etc.) without requiring elevated privileges or user interaction. The attacker retrieves unredacted credit allocations and usage statistics for AI personas and LLM models across the entire organization, discovering that competitors' accounts or other departments have significantly higher AI resource budgets, enabling corporate espionage or revealing strategic priorities. Because the vulnerability requires only network access and a valid login (realistic in a public-facing discussion forum), and the CVSS attack complexity is low, exploitation is trivial and requires minimal technical sophistication. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 20, 2026
An Insecure Direct Object Reference (IDOR) vulnerability in Discourse allows any authenticated user to access restricted metadata about AI personas, features, and LLM models by directly referencing their identifiers, exposing sensitive information including credit allocations and usage statistics. The vulnerability affects Discourse versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, and requires only low-privilege access (any logged-in user account) over the network. While the CVSS score of 5.3 indicates low confidentiality impact with no integrity or availability impact, this represents a clear information disclosure risk that could enable unauthorized tracking of AI resource consumption and usage patterns.
RemediationAI
Upgrade Discourse to version 2026.3.0-latest.1, 2026.2.1, or 2026.1.2 or later, depending on your current version track, as these versions contain the authorization validation patch (see vendor advisory at https://github.com/discourse/discourse/security/advisories/GHSA-3cvr-pm4c-hx96). For deployments unable to patch immediately, disable the AI plugin through the Discourse admin settings panel to eliminate the attack surface entirely. If the AI plugin must remain enabled pending patching, implement network-level access controls to restrict access to Discourse to trusted users and networks, configure authentication to require strong credentials and multi-factor authentication where possible, and monitor API access logs for suspicious enumeration patterns targeting AI metadata endpoints. Patching should be prioritized as the permanent remediation given the ease of exploitation and the sensitive nature of the exposed data.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 3 packages in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability is rooted in CWE-639 (Authorization Bypass Through User-Controlled Key), a class of authorization flaws where an application fails to properly validate that a user has permission to access objects they reference directly. In Discourse's context, the AI plugin exposes API endpoints that accept identifiers for AI personas, LLM models, and feature configurations without performing adequate authorization checks beyond simple authentication status. The affected technology involves Discourse's Ruby on Rails-based backend and its AI plugin components, which fail to enforce object-level access controls on metadata endpoints. An attacker can enumerate or guess identifiers and retrieve associated metadata without additional privileges beyond a valid user session, bypassing intended access restrictions on credit allocations and usage telemetry data that should be restricted to administrators or specific role holders.
Know when Discourse gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
Lifecycle Timeline
2DescriptionGitHub Advisory
Discourse is an open-source discussion platform. Prior to versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2, there is an Insecure Direct Object Reference (IDOR) vulnerability that allows any authenticated user to access metadata about AI personas, features, and LLM models by providing their identifiers. This information includes credit allocations and usage statistics which are not intended to be public. The attack is performed over the network, requires low privileges (any logged-in user), and results in a low impact on confidentiality with no impact on integrity or availability. Versions 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 contain a patch. To work around this issue, disable AI plugin or upgrade to a patched version.
Executive ViewAI
Organizations using Discourse should be aware of moderate risk from CVE-2026-32114, a IDOR vulnerability rated CVSS 4.3. Exploitation could compromise the security of affected deployments. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in Discourse Authorization and Information Disclosure
View all 6Discourse versions prior to 3.5.0.beta6 contain a reflected cross-site scripting (XSS) vulnerability in social login fun
discourse-bbcode is the official BBCode plugin for Discourse. Rated critical severity (CVSS 9.8), this vulnerability is
Unauthorized information disclosure in Discourse discussion platform versions prior to 2026.3.0-latest.1, 2026.2.1, and
Discourse is an open source platform for community discussion. Rated high severity (CVSS 8.2), this vulnerability is rem
Discourse versions prior to 2025.12.2, 2026.1.1, and 2026.2.0 contain an insecure direct object reference (IDOR) in the
In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms. Rated
Unauthenticated attackers can submit forged webhook payloads to multiple email provider integrations in Discourse versio
Discourse is an open-source discussion platform. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploi
Discourse is an open source platform for community discussion. Rated medium severity (CVSS 5.9), this vulnerability is r
Discourse versions prior to 3.4.4 (stable), 3.5.0.beta5 (beta), and 3.5.0.beta6-dev (tests-passed) contain a critical vu
Discourse is an open source platform for community discussion. Rated critical severity (CVSS 9.8), this vulnerability is
Discourse Patreon enables syncronization between Discourse Groups and Patreon rewards. Rated critical severity (CVSS 9.8
Exploit-DB