Permission Escalation Vulnerability in Discourse by Discourse

CVE-2026-33426

What is CVE-2026-33426?

Discourse, an open-source discussion platform, has identified a vulnerability that allows users with tag-editing permissions to modify and create synonyms for tags that are hidden in restricted tag groups. This occurs even if those users do not have visibility into the restricted tags. This flaw could lead to unauthorized alterations, potentially affecting the integrity of tag organization and accessibility within the platform. Users should upgrade to the patched versions 2026.3.0-latest.1, 2026.2.1, or 2026.1.2 as no workarounds are available to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References