# CVE-2026-103286: Ghost privilege escalation in notifications system

Source: https://junglewise.ai/threats/cve-2026-103286-ghost-versions-from-2-21-0-before-6-56-0-contain-a-privilege  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-01. Updated: 2026-10-05  
License: CC BY 4.0 with a link back

CVE-2026-103286 · Severity: high · CVSS 7.3 · Published 2026-10-01

Ghost is a content management platform used by publishers to create and manage websites and newsletters. A flaw in the notifications system allows staff members with low-level access to illegally gain higher-level permissions, potentially enabling them to access sensitive content, modify site settings, or compromise other user accounts.

Technologies: [Ghost](https://junglewise.ai/threats/technologies/ghost-ghost). Vendors: [Ghost](https://junglewise.ai/threats/vendors/ghost).

## Quick answers

**Is CVE-2026-103286 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-103286 being exploited in the wild.

**How severe is CVE-2026-103286?** High severity, with a CVSS score of 7.3, published 1 October 2026.

**Which products and versions are affected?** Ghost 2.21.0 to before 6.56.0.

**Is there a fix for CVE-2026-103286?** Yes: fixed in Ghost 6.56.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-103286 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-103286?** Check whether you run Ghost at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Ghost 6.56.0

## Technical details

Ghost versions 2.21.0 through 6.55.x contain an incorrect privilege assignment vulnerability in the notifications system (CWE-266). The vulnerability allows an authenticated low-privilege staff user to escalate to higher-privilege staff roles through the notifications system without proper authorization checks. Exploitation requires network access, low staff privileges, and user interaction, and is fixed in Ghost v6.56.0.

## Affected products

- Ghost Ghost 2.21.0 to before 6.56.0

## Timeline

- 2026-08-11: disclosed
- 2026-10-01: advisory
- 2026-08-11: patched

## References

- [https://github.com/TryGhost/Ghost/security/advisories/GHSA-pv24-pfvg-vr83](https://github.com/TryGhost/Ghost/security/advisories/GHSA-pv24-pfvg-vr83)
- [https://www.vulncheck.com/advisories/ghost-2.21.0-before-6.56.0-privilege-escalation-via-notifications](https://www.vulncheck.com/advisories/ghost-2.21.0-before-6.56.0-privilege-escalation-via-notifications)

## Related threats

- [Ghost input validation bypass in comments access control](https://junglewise.ai/threats/cve-2026-105681-ghost-is-a-node-js-content-management-system-from-5-9-0-until-6)
- [Ghost privilege escalation via user role assignment](https://junglewise.ai/threats/cve-2026-105678-ghost-is-a-node-js-content-management-system-from-0-5-0-until-6)
- [Ghost arbitrary code execution in theme translation loading](https://junglewise.ai/threats/cve-2026-105677-ghost-is-a-node-js-content-management-system-from-6-10-3-until-6)
- [Ghost privilege escalation via staff invite token disclosure](https://junglewise.ai/threats/cve-2026-105675-ghost-is-a-node-js-content-management-system-from-4-39-0-until-6)
- [Ghost CMS arbitrary file storage in bookmark cards](https://junglewise.ai/threats/cve-2026-105651-ghost-is-a-node-js-content-management-system-from-5-94-0-until-6)