CVE-2026-32951
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Discourse allows an authenticated user to obtain shared draft topic titles by sending an inline onebox request with a matching category_id.
Risk Assessment
A user can read topic titles that should be hidden, potentially leading to information disclosure.
Recommendation
Update Discourse to version 2026.1.3, 2026.2.2, or 2026.3.0.
Original NVD description (English source)
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, an authenticated user can obtain shared draft topic titles by sending an inline onebox request with a category_id parameter matching the shared drafts category. This issue has been patched in versions 2026.1.3, 2026.2.2, and 2026.3.0.