An input validation flaw in Ghost allows authenticated members to retrieve comments that they are not authorized to view, effectively bypassing the system’s comment‑access controls. This flaw can expose sensitive user data or internal discussions to unauthorized users, representing a direct compromise of confidentiality for data protected by role permissions.

The vulnerability affects TryGhost Ghost versions 5.9.0 through 6.44.1. Version 6.44.1 contains the fix that removes the flawed validation logic. All installations on a version in the affected range should be evaluated for impact.

With a CVSS score of 6.5 the issue is of moderate severity and the exploit is likely to be performed by a member who has legitimate login credentials but malicious intent. The exploit would involve sending a crafted request to the comments endpoint that bypasses permission checks. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, indicating a lower public exploitation probability at present.