Ghost: Remote code execution via bookmark card images
Summary
Ghost, a Node.js content management system, contains a flaw in the SVG handling of an image processing library bundled with it. Any staff user, including the lowest role Contributor, can create a bookmark card for an attacker-controlled website and thereby run arbitrary commands on the Ghost server. User interaction is required, as the CVSS vector indicates a need for a user to view or interact with the content.
Affected
- Ghost versions from 6.56.0 up to, but not including, 6.67.0
- Vendor advisory text names v6.65.0 as the last vulnerable version; third-party sources differ (6.66.x), so treat every version below 6.67.0 as affected
- Self-hosted and Ghost(Pro) deployments: Ghost(Pro) status unknown
Fixed in
- Ghost 6.67.0
Workaround
- No vendor workaround. Update is the only documented remediation.
- Interim measures (not vendor-sourced): limit staff and Contributor accounts to required users, review staff accounts for unknown users, and review recent bookmark cards for links to unfamiliar sites. These reduce exposure but do not replace the update.
Exploitation
- Not listed as known exploited (CISA KEV: no).
- CISA SSVC: exploitation none, automatable no, technical impact total.
- No public exploit code found in the sources reviewed; EPSS unknown.
Our recommendation
- Update self-hosted Ghost to version 6.67.0 or later, using the official Docker image or Ghost-CLI update path.
- Review which accounts have staff or Contributor roles and remove unneeded ones.
- Check recent bookmark cards and server logs for suspicious activity.
- Prioritise patching within the normal high-severity window.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Vendor advisory GHSA-788w-68h3-cvxp github.com
- GitHub Advisory Database github.com
- OSV osv.dev
- GitLab advisory advisories.gitlab.com
- Ghost security page github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 22:32.
Original description (NVD)
Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary commands being run on the Ghost server. This issue is fixed in version 6.67.0.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.