CVE-2026-57447 Discourse Doc Categories: Doc category index refresh leaks private topic titles

Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for private messages or restricted category topics without enforcing the viewer's authorization. A user who can edit the...

CVE-2026-57447

The Discourse Doc Categories plugin contains a vulnerability where the doc category index refresh fails to enforce proper authorization. This allows a user with permission to edit the index topic to view titles of private messages or restricted category topics they are otherwise unauthorized to a...