PT-2026-20787 · Ghost · Ghost
CVSS v2.0
9.7
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:P |
Name of the Vulnerable Software and Affected Versions
Ghost versions 3.24.0 through 6.19.0
Description
A blind SQL injection exists in the Content API of Ghost, a Node.js content management system. The issue stems from the use of string concatenation instead of parameterized queries when processing user input in the
slug filter, allowing unauthenticated attackers to perform arbitrary reads from the database. This flaw was exploited in a large-scale campaign affecting over 700 domains, including high-profile institutions like Harvard and Oxford. Attackers targeted the /ghost/api/content/tags/ endpoint to steal Admin API keys, which were then used to inject malicious JavaScript into articles. This injected code facilitated ClickFix attacks, where users were deceived by fake Cloudflare verification prompts into executing harmful commands locally, leading to the installation of infostealers and Remote Access Trojans (RATs) on macOS and Windows systems.Recommendations
Update Ghost to version 6.19.1 or later.
Rotate all Admin API keys.
Inspect article content at the database level to identify and remove injected scripts.
Review Admin API call logs for unauthorized bulk article modifications.
As a temporary mitigation, use a reverse proxy or WAF rule to block Content API requests containing
slug%3A%5B or slug:[ in the query string filter parameter.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ghost