Threats tagged 'bit-discourse-2026-32244'

Discourse versions prior to 2026.1.4, 2026.3.1, 2026.4.1, and 2026.5.0 have a vulnerability where outdated cached AI-generated summaries can expose removed content to anonymous and unprivileged users who cannot regenerate summaries. This issue has been addressed in the specified fixed versions. A temporary mitigation involves restricting summary generation by tightening allowed groups on summarization Personas.