What is the CVSS score of EUVD-2026-52977?

EUVD-2026-52977 has a CVSS 3.1 base score of 6.6 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L. EPSS exploitation probability: 0.3%.

Is there a public PoC exploit available for EUVD-2026-52977?

Yes, a public proof-of-concept exploit is available for EUVD-2026-52977. Prioritise patching immediately. EPSS: 0.3%.

Is there a patch available for EUVD-2026-52977?

Yes, a patch is available for EUVD-2026-52977. Update the affected software to the latest version immediately.

Ghost CMS EUVD-2026-52977

| CVE-2026-70593 MEDIUM

Path Traversal (CWE-22)

2026-08-04 https://github.com/TryGhost/Ghost

GHSA-cjc9-q5gf-327p

Docker Path Traversal

6.6

CVSS 3.1 · Vendor: https://github.com/TryGhost/Ghost

Severity by source

Vendor (https://github.com/TryGhost/Ghost) PRIMARY

6.6 MEDIUM

AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L

vuln.today AI

7.6 HIGH

AC:L chosen over vendor AC:H because crafting a path-traversal theme name is straightforward with no attacker-uncontrollable conditions; PR:H retained as staff authentication is required; S:C reflects writes escaping the uploads directory boundary.

3.1 AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:N

Primary rating from Vendor (https://github.com/TryGhost/Ghost).

CVSS VectorVendor: https://github.com/TryGhost/Ghost

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

Source Code Evidence Fetched

Aug 05, 2026 - 00:29 vuln.today

Analysis Generated

Aug 05, 2026 - 00:29 vuln.today

DescriptionCVE.org

Impact

A vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation.

Vulnerable versions

This vulnerability is present in Ghost from v0.10.0 up to v6.54.0.

Patches

v6.54.1 contains a fix for this issue.

How to update

For self-hosters using Docker, find Docker's official Ghost image here. Updating a Docker-based Ghost instance is documented here.

If your Ghost is a Ghost-CLI install see our documentation on updating it to the latest version here.

References

Ghost thanks Stephen Sims, Off By One Security for disclosing this vulnerability responsibly.

For more information

If you have any questions or comments about this advisory, email Ghost at [security@ghost.org](mailto:security@ghost.org).

AnalysisAI

Path traversal in Ghost CMS theme upload (CWE-22) allows an authenticated staff-level user to write arbitrary files outside the designated uploads directory, potentially altering the behavior of the entire Ghost installation. Affected versions span v0.10.0 through v6.54.0 of the npm/ghost package - a wide range covering essentially all modern deployments. No public exploit code or CISA KEV listing exists at time of analysis; however, the CVSS Scope:Changed metric reflects that a successful write can affect components beyond the theme storage boundary, elevating the real-world impact above the moderate base score suggests.

Technical ContextAI

Ghost is a Node.js headless CMS distributed as the npm package pkg:npm/ghost. The vulnerability exists in two components: ghost/core/core/server/services/themes/storage.js, which processes incoming theme names, and ghost/core/core/server/adapters/storage/LocalStorageBase.ts, the shared storage adapter responsible for resolving and writing files to disk. The root cause (CWE-22: Improper Limitation of a Pathname to a Restricted Directory) is the absence of boundary validation on theme names and resolved file paths - a theme archive with a name containing ../ sequences would cause path.join() to resolve a destination outside content/themes/. The patch (commit fbaa92327e52607036a1e42204c9eadcc751d82c) adds two independent controls: a regex /^[./]*$/ in themes/storage.js to reject names composed entirely of path traversal characters, and a path.resolve() prefix check in LocalStorageBase.ts ensuring the resolved output path starts within the declared target directory.

RemediationAI

Upgrade Ghost to v6.54.1 or later, which contains the complete fix (commit fbaa92327e52607036a1e42204c9eadcc751d82c). For Docker deployments, update the official ghost image following https://docs.ghost.org/install/docker#updating-ghost; for Ghost-CLI installations, follow https://docs.ghost.org/update. Vendor-released patch version v6.54.1 is independently confirmed via the GitHub release tag. If immediate patching is not feasible, restrict staff-role membership to fully trusted users as a compensating control, since the attack requires an authenticated staff session - note this does not eliminate the vulnerability but reduces the attacker population. There is no configuration switch to disable theme uploads without broader functional impact to Ghost's customization workflow.