A vulnerability labeled as problematic has been found in Discourse up to 2026.1.3/2026.3.0/2026.4.0. This affects an unknown function. Such manipulation leads to missing authorization.
This vulnerability is traded as CVE-2026-34154. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
