CVE-2026-78203: Authorization Bypass Through User-Controlled Key in GhostManager Ghostwriter

CVE-2026-78203 is an authorization bypass vulnerability in Ghostwriter prior to version 7.1.2. The vulnerability arises because the software fails to validate template ownership in the report template swap endpoint. Attackers can leverage sequential template primary keys to enumerate and attach templates scoped to other clients to their own reports. This enables disclosure of template contents that should be restricted, such as letterhead, boilerplate, and methodology text. The CVSS 4.0 score is 7.1, indicating a high severity issue with network attack vector, low attack complexity, and no user interaction required.

An attacker with limited privileges can bypass authorization controls to access and disclose report templates belonging to other clients. This leads to unauthorized information disclosure of potentially sensitive template content, which could undermine confidentiality and trust in the report generation process.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability affects Ghostwriter versions before 7.1.2. Users should upgrade to version 7.1.2 or later once a fix is officially released. Until then, restrict access to the report template swap endpoint to trusted users only and monitor for unusual template access patterns.