NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats

The Hacker News 24 July 2026, 10:41 EEST Security AI

Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software's source code. Every version before 4.14.0 is affected. NodeBB has fixed them all, and administrators should be on 4.14.2. The simplest one takes a settings…

Read the full story on The Hacker News https://thehackernews.com/2026/07/nodebb-patches-eight-ai-found-flaws.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents The Hacker News
The Network Has Become the Control Plane for AI Security The Hacker News
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts The Hacker News
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation The Hacker News