Discourse is an open-source discussion platform.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 19, 2026 · NIST NVD

   Detected

   Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, an authenticated user on a Discourse instance with the form templates feature enabled can read the name and structured content of form templates that are intended exclusively for categories they are not authorized to access. Impact is limited to disclosure of site configuration

2. Jul 24, 2026 · NIST NVD

   Updated

   Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, an authenticated user on a Discourse instance with the form templates feature enabled can read the name and structured content of form templates that are intended exclusively for categories they are not authorized to access. Impact is limited to disclosure of site configuration

Affected

• cpe discourse/discourseversion unspecified
• cpe discourse/discourse2026.5.0

Sources

• CVE.orgVulnerability recordCVE-2026-33514

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33514

  Discourse is an open-source discussion platform. In versions prior to 2026.1.4, 2026.3.1, 2026.4.1 and 2026.5.0-latest.1, an authenticated user on a Discourse instance with the form templates feature enabled can read the name and structured content of form templates that are inte

  nvd.nist.gov

References

• Patch · github.com
• Vendor Advisory · github.com