Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-44779 EUVD-2026-36583

Discourse: Bot debug endpoints disclose whisper translation audit logs

Published Jun 12, 2026 · Updated Jun 15, 2026 · Assigned by GitHub_M

Description

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, bot debug endpoints disclose whisper translation audit logs. This issue has been patched in versions 2026.1.4, 2026.3.1, 2026.4.1, and 2026.5.0-latest.1.

Affected products

VendorProductAffectedFixed
discourse discourse >= 2026.1.0-latest, < 2026.1.4, >= 2026.3.0-latest, < 2026.3.1, >= 2026.4.0-latest, < 2026.4.1 —

References