A vulnerability was found in Discourse up to 2025.12.1/2026.1.0. It has been declared as problematic. This impacts an unknown function of the component Voters Endpoint. The manipulation results in missing authorization.
This vulnerability is known as CVE-2026-27021. It is possible to launch the attack remotely. No exploit is available.
It is recommended to upgrade the affected component.
