THREATOPS
THREAT OPSThreat News › NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

lowthehackernewsPublished 2026-07-24

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software's source code.

Every version before 4.14.0 is affected. NodeBB has fixed them all, and administrators should be on 4.14.2.

The simplest one takes a settings change. A

Original source: https://thehackernews.com/2026/07/nodebb-patches-eight-ai-found-flaws.html