CVE-2026-25552
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
Ghost CLI before version 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header in a misconfigured Nginx.
Risk Assessment
An attacker can perform brute-force attacks or other high-volume operations, bypassing rate-limiting mechanisms.
Recommendation
Update Ghost CLI to version 1.30.1 or later and configure Nginx to not trust X-Forwarded-For headers from clients.
Original NVD description (English source)
Ghost CLI before 1.30.1 contains an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass rate-limiting controls by manipulating the X-Forwarded-For header through a misconfigured Nginx configuration. Attackers can append attacker-controlled values to the header chain using the $proxy_add_x_forwarded_for directive to present an arbitrary IP address, circumventing Ghost's rate-limiting mechanisms on self-hosted instances.