Discourse AI Suggestion Endpoint Vulnerability in Open-Source Community Platform

CVE-2025-58055

What is CVE-2025-58055?

In the Discourse community discussion platform, versions 3.5.0 and earlier contain a vulnerability in their AI suggestion endpoints. This issue allows authenticated users to manipulate API requests, specifically by altering the 'topic_id' parameter. As a result, users can access sensitive information about topics beyond their authorization level. The AI model responses may inadvertently reveal details about restricted topics, posing a significant risk to data privacy. Discourse has released a patch in version 3.5.1 and recommends users adjust group access settings to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References