Discourse ImageMagick security flaw Enables Arbitrary File Read Through Malicious Image Uploads

What happened

Security researchers have revealed a critical vulnerability in Discourse, tracked as CVE-2026-55420 (the public catalogue number for a specific software flaw). The issue was fixed for hosted customers in June 2026 and was publicly disclosed on June 30, 2026.

This flaw could let a low-privileged user read and write files on the underlying server by exploiting the platform’s ImageMagick-based upload pipeline. The vulnerability affects […] The post Discourse ImageMagick Vulnerability Enables Arbitrary File Read Through Malicious Image Uploads appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .