Skip to content
OpenAdvisories

Product · TryGhost

Ghost-CLI

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-25552

    Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header

    Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-c…

    TryGhost Ghost-CLI