A vulnerability classified as problematic was found in Discourse up to 2026.1.2/2026.2.1. Impacted is an unknown function. The manipulation results in information disclosure.
This vulnerability is known as CVE-2026-33300. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.