{"vulnerability": "cve-2026-70592", "sightings": [{"uuid": "5b66855f-42aa-4b9f-85b2-7f8a03761179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70592", "type": "seen", "source": "https://gist.github.com/alon710/7709dc60acce15f366b5c87665dcce14", "content": "# CVE-2026-70592: CVE-2026-70592: Path Traversal Vulnerability in Ghost CMS Database Exporter\n\n> **CVSS Score:** 5.5\n> **Published:** 2026-08-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70592\n\n## Summary\nA path traversal vulnerability (CWE-22) in Ghost CMS versions 1.20.1 through 6.54.0 allows authenticated administrators to escape the backup directory and perform arbitrary file write operations on the hosting system. This vulnerability was resolved in version 6.54.1.\n\n## TL;DR\nAn authenticated path traversal vulnerability in Ghost CMS database export functionality allows arbitrary file writing on the server hosting the application, fixed in version 6.54.1.\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.5\n- **EPSS Score**: N/A\n- **Impact**: Arbitrary File Write / Overwrite\n- **Exploit Status**: None / Conceptual\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Ghost CMS\n- **Ghost**: >= 1.20.1, < 6.54.1 (Fixed in: `6.54.1`)\n\n## Mitigation\n\n- Upgrade Ghost CMS to version 6.54.1 or later.\n- Set the environment variable disableJSBackups=true to disable the backup endpoint.\n- Implement strict least-privilege principles on the Ghost system service account.\n\n**Remediation Steps:**\n1. Check current Ghost version via command-line or administrative console.\n2. Upgrade the deployment to version 6.54.1 using the standard update command.\n3. Verify path traversal requests are blocked by testing against the updated API endpoint.\n4. Optionally modify config.production.json to set disableJSBackups to true if upgrading cannot occur immediately.\n\n## References\n\n- [GitHub Security Advisory GHSA-cj62-hvv2-2q5h](https://github.com/TryGhost/Ghost/security/advisories/GHSA-cj62-hvv2-2q5h)\n- [Official Fix Commit f466c30](https://github.com/TryGhost/Ghost/commit/f466c300191a609ed36c8d7c5d1e33ccd440786b)\n- [Ghost Release v6.54.1](https://github.com/TryGhost/Ghost/releases/tag/v6.54.1)\n- [NVD CVE-2026-70592 Record](https://nvd.nist.gov/vuln/detail/CVE-2026-70592)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-70592)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70592) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-05T03:31:03.413096Z"}]}