CVE-2026-103282

Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. Attackers can exploit this race condition by submitting concurrent requests with the same invitation token to create...

PT-2026-103814

Name of the Vulnerable Software and Affected Versions Ghost versions 0.5.0 through 6.22.9 Description A concurrency issue exists in the staff invitation acceptance mechanism. This race condition allows an attacker to create multiple user accounts using a single invitation token by submitting...