PT-2026-26361 · Discourse · Discourse

Nlgbao1340 · Published 2026-03-19 · Updated 2026-03-22 · CVE-2026-27740

Positive Technologies · (AI Summary)

CVSS v3.1

6.1

Medium

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.3.0-latest.1 Discourse versions prior to 2026.2.1 Discourse versions prior to 2026.1.2

Description Discourse, an open-source discussion platform, is affected by a cross-site scripting issue. The system improperly trusts and renders output from an AI Large Language Model (LLM) using htmlSafe within the Review Queue interface, lacking sufficient sanitization. An attacker can leverage Prompt Injection techniques to make the AI generate a malicious payload, such as tags. When a staff member (Admin/Moderator) views a flagged post in the Review Queue, this payload is executed.

Recommendations Versions prior to 2026.3.0-latest.1 should be updated. Versions prior to 2026.2.1 should be updated. Versions prior to 2026.1.2 should be updated. As a temporary workaround, disable AI triage automation scripts.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-27740

Affected Products

Discourse

References · 9

• https://github.com/discourse/discourse/commit/ed70949f2c047196f33cfa94f2819df29c5d1e5f · Patch
• https://github.com/discourse/discourse/security/advisories/GHSA-95hc-42c6-wvvr · Vendor Advisory
• https://github.com/discourse/discourse/commit/44b84439df7e4424b2e7f216fd8fdd7dacff2227 · Patch
• https://github.com/discourse/discourse/commit/8ae7cb2414d6918d7fc45e1fda7ffbb32912a975 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-27740 · Security Note
• https://twitter.com/VulmonFeeds/status/2034810851115340214 · Twitter Post
• https://twitter.com/infoflowcloud/status/2035627843015660020 · Twitter Post
• https://twitter.com/ai_security_10x/status/2035675843532595440 · Twitter Post
• https://twitter.com/CVEnew/status/2035627054696218801 · Twitter Post