Data Exposure Vulnerability in Discourse Open-Source Discussion Platform

CVE-2026-32143

What is CVE-2026-32143?

Discourse, a well-known open-source discussion platform, contains a vulnerability that allows moderators to export CSV data from admin-restricted reports. This occurs in versions 2026.1.0-latest through just prior to 2026.1.3, and similarly for 2026.2.0-latest through just before 2026.2.2, as well as 2026.3.0-latest right before the next version. The flaw thus permits unauthorized access to sensitive operational data that should be limited to admins only. The issue has been resolved in the latest versions 2026.1.3, 2026.2.2, and 2026.3.0.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References