CVE-2026-57447 Discourse Doc Categories: Doc category index refresh leaks private topic titles
An attacker with edit access to the index topic can view titles of private or restricted topics they are not authorized to see.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-57447?
CVE-2026-57447 is a medium-severity vulnerability in discourse-doc-categories, published on 16 Oct 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for private messages or restricted category topics without enforcing the viewer's authorization. A user who can edit the index topic can use this behavior to learn titles that the user is not authorized to view, although the advisory does not establish access to topic contents. This vulnerability is addressed by commit b15d4de02ad29d7c9525346afee51fef4a2c605a.
Weakness: CWE-200
Which versions are affected by CVE-2026-57447?
How do I fix CVE-2026-57447?
No fix has been published for CVE-2026-57447 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-57447 being exploited?
There is no known exploitation of CVE-2026-57447 in the wild and no public exploit code.
Sources
Also known as GHSA-x63p-48vw-8r64.