Subscription Bypass Vulnerability in Discourse Discussion Platform

CVE-2026-33074

What is CVE-2026-33074?

An issue has been identified in the Discourse platform where users can exploit a vulnerability to gain access to higher-tier subscription benefits by purchasing a lower-tier subscription. This flaw specifically affects versions 2026.1.0 to 2026.1.2, 2026.2.0 to 2026.2.1, and 2026.3.0 prior to the latest release. The vulnerability has been addressed in updates 2026.1.3, 2026.2.2, and 2026.3.0, prompting users to upgrade their installations to ensure proper security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References