{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72726", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-08-10T13:48:09.545Z", "datePublished": "2026-08-10T16:05:11.044Z", "dateUpdated": "2026-08-10T16:57:12.320Z"}, "containers": {"cna": {"title": "Discourse: Unauthorized eavesdropping on private AI bot conversations.", "problemTypes": [{"descriptions": [{"cweId": "CWE-200", "lang": "en", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/discourse/discourse/security/advisories/GHSA-gw88-2jw8-jf2h", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/discourse/discourse/security/advisories/GHSA-gw88-2jw8-jf2h"}, {"name": "https://github.com/discourse/discourse/commit/01faa889830f56e02fba2f6c1731811d319c5e81", "tags": ["x_refsource_MISC"], "url": "https://github.com/discourse/discourse/commit/01faa889830f56e02fba2f6c1731811d319c5e81"}, {"name": "https://github.com/discourse/discourse/commit/1fb2026eb8004dfeb12553014cc534dfd8083fbc", "tags": ["x_refsource_MISC"], "url": "https://github.com/discourse/discourse/commit/1fb2026eb8004dfeb12553014cc534dfd8083fbc"}, {"name": "https://github.com/discourse/discourse/commit/9247666f8359f3cf214b8aea3d396e8a8237ed38", "tags": ["x_refsource_MISC"], "url": "https://github.com/discourse/discourse/commit/9247666f8359f3cf214b8aea3d396e8a8237ed38"}, {"name": "https://github.com/discourse/discourse/commit/b56b98232aa4dad4a30500a65e31db0c9080c8f5", "tags": ["x_refsource_MISC"], "url": "https://github.com/discourse/discourse/commit/b56b98232aa4dad4a30500a65e31db0c9080c8f5"}], "affected": [{"vendor": "discourse", "product": "discourse", "versions": [{"version": "< 2026.1.6", "status": "affected"}, {"version": ">= 2026.5.0, < 2026.5.2", "status": "affected"}, {"version": ">= 2026.6.0, < 2026.6.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-10T16:05:11.044Z"}, "descriptions": [{"lang": "en", "value": "Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an authenticated user could eavesdrop on private AI bot conversations through the AI bot reply stream. The issue is fixed in 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0."}], "source": {"advisory": "GHSA-gw88-2jw8-jf2h", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-10T16:56:59.240227Z", "id": "CVE-2026-72726", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-10T16:57:12.320Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-72726", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-10T16:56:59.240227Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-10T16:57:08.429Z"}}], "cna": {"title": "Discourse: Unauthorized eavesdropping on private AI bot conversations.", "source": {"advisory": "GHSA-gw88-2jw8-jf2h", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "discourse", "product": "discourse", "versions": [{"status": "affected", "version": "< 2026.1.6"}, {"status": "affected", "version": ">= 2026.5.0, < 2026.5.2"}, {"status": "affected", "version": ">= 2026.6.0, < 2026.6.1"}]}], "references": [{"url": "https://github.com/discourse/discourse/security/advisories/GHSA-gw88-2jw8-jf2h", "name": "https://github.com/discourse/discourse/security/advisories/GHSA-gw88-2jw8-jf2h", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/discourse/discourse/commit/01faa889830f56e02fba2f6c1731811d319c5e81", "name": "https://github.com/discourse/discourse/commit/01faa889830f56e02fba2f6c1731811d319c5e81", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/discourse/discourse/commit/1fb2026eb8004dfeb12553014cc534dfd8083fbc", "name": "https://github.com/discourse/discourse/commit/1fb2026eb8004dfeb12553014cc534dfd8083fbc", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/discourse/discourse/commit/9247666f8359f3cf214b8aea3d396e8a8237ed38", "name": "https://github.com/discourse/discourse/commit/9247666f8359f3cf214b8aea3d396e8a8237ed38", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/discourse/discourse/commit/b56b98232aa4dad4a30500a65e31db0c9080c8f5", "name": "https://github.com/discourse/discourse/commit/b56b98232aa4dad4a30500a65e31db0c9080c8f5", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an authenticated user could eavesdrop on private AI bot conversations through the AI bot reply stream. The issue is fixed in 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-10T16:05:11.044Z"}}}, "cveMetadata": {"cveId": "CVE-2026-72726", "state": "PUBLISHED", "dateUpdated": "2026-08-10T16:57:12.320Z", "dateReserved": "2026-08-10T13:48:09.545Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-08-10T16:05:11.044Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "discourse", "vendor": "discourse", "versions": [{"status": "affected", "version": "< 2026.1.6"}, {"status": "affected", "version": ">= 2026.5.0, < 2026.5.2"}, {"status": "affected", "version": ">= 2026.6.0, < 2026.6.1"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an authenticated user could eavesdrop on private AI bot conversations through the AI bot reply stream. The issue is fixed in 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0."}], "id": "CVE-2026-72726", "lastModified": "2026-08-10T17:17:36.717", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-72726", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-10T16:56:59.240227Z", "version": "2.0.3"}}]}, "published": "2026-08-10T16:19:50.097", "references": [{"source": "[email protected]", "url": "https://github.com/discourse/discourse/commit/01faa889830f56e02fba2f6c1731811d319c5e81"}, {"source": "[email protected]", "url": "https://github.com/discourse/discourse/commit/1fb2026eb8004dfeb12553014cc534dfd8083fbc"}, {"source": "[email protected]", "url": "https://github.com/discourse/discourse/commit/9247666f8359f3cf214b8aea3d396e8a8237ed38"}, {"source": "[email protected]", "url": "https://github.com/discourse/discourse/commit/b56b98232aa4dad4a30500a65e31db0c9080c8f5"}, {"source": "[email protected]", "url": "https://github.com/discourse/discourse/security/advisories/GHSA-gw88-2jw8-jf2h"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "[email protected]", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2026.1.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2026.5.0,2026.5.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2026.6.0,2026.6.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "discourse", "source": "cna", "vendor": "discourse"}, "product": "discourse", "vendor": "discourse"}], "created": "2026-08-10T18:15:11.380005+00:00", "updated": "2026-08-11T03:45:03.267163+00:00", "vendors": ["discourse", "discourse$PRODUCT$discourse"]}