A vulnerability classified as problematic was found in TryGhost Ghost up to 6.19.2. Affected is an unknown function of the file /session/verify. Executing a manipulation can lead to cross-site request forgery.

This vulnerability appears as CVE-2026-29784. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.