Discussion Spam Vulnerability in OmniBlocks by OmniBlocks
CVE-2026-54594

5.3MEDIUM

Key Information:

Vendor

Omniblocks

Status
Monorepo
Vendor
CVE Published:
17 September 2026

What is CVE-2026-54594?

The vulnerability in OmniBlocks arises from a misconfiguration in its GitHub workflows that triggers createDiscussion mutations for off-topic issues without proper checks. This allows users to create multiple discussion threads for the same off-topic issue by editing it repeatedly, which can lead to unnecessary discussion spam and increased moderation efforts. The issue was addressed with a recent update, ensuring that discussions are not duplicated for the same issue, thus streamlining workflow efficiency and reducing spam.

Affected Version(s)

monorepo < OmniBlocks

References

https://github.com/OmniBlocks/monorepo/security/advisorie...
x_refsource_CONFIRM
https://github.com/OmniBlocks/monorepo/commit/2953ef77649...
x_refsource_MISC
https://github.com/OmniBlocks/monorepo/commit/627e0f0a16a...
x_refsource_MISC

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.