Published Jul 24, 2026, 3:41 AM ET · Updated 4 months ago · 1 source
NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
The Hacker News
·
Original Report
Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software's source code. Every version before 4.14.0 is affected. NodeBB has fixed them all, and administrators should be on 4.14.2. The simplest one takes a settings change. A