shouldiuse.io

Categories

VERDICT

Ghostfolio Review

Depends

Should I use Ghostfolio?

Open source wealth management dashboard tracking net worth across cash, stocks, ETFs and cryptocurrencies. - ghostfol.io

· 1 month ago

Buy if you're a privacy-minded self-hoster comfortable running, updating, and patching your own server. Skip it if you want hands-off hosted tracking with vendor-managed security.

Confidence

Medium. Based on 15 public sources; no numeric review ratings or vendor pricing pages found.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Self-hosted

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Self-hosters and privacy purists
  • Multi-broker DIY investors
  • Spreadsheet refugees automating net worth
  • Open-source enthusiasts avoiding paid trackers

Not for

  • Anyone unwilling to run and patch a server
  • Hands-off investors wanting plug-and-play broker sync
  • Firms and advisors — it's personal, not professional, software
  • Users who won't track CVEs on their own deployment

Gotchas - check before you buy

high

Patch immediately: auth bypass affects all versions prior to 3.4

medium

Two additional CVEs appear in databases, one medium (CVSS 4.3)

medium

Verify splits, consolidations, dividend handling before importing history

medium

Broker sync tools like Trading 212 are unofficial and may break

Pros and cons

Pros

  • Privacy-first, open source dashboard for net worth
  • Tracks cash, stocks, ETFs, crypto across multiple platforms
  • Free to self-host under AGPL-3.0
  • Community-built broker syncs, e.g. Trading 212 tool
  • Strong community buzz: 456-point Hacker News thread

Cons

  • Auth bypass vulnerability affects all versions before 3.4
  • Free path requires self-hosting and maintenance
  • Stock-split and dividend handling questioned by users
  • Price-chart accuracy complaints in self-hosted tracker threads

Sources & method

- 10 sources - Multiple CVEs in reviewed sources, including an auth bypass fixed in v3.4 — patch before trusting it with financial data.

official x2review x4security x3news x1
  • CVE-2026-47127: Auth bypass, Affects all Ghostfolio versions prior to 3.4
  • CVE-2026-59709, Medium severity, CVSS 4.3
  • CVE-2026-59708, Listed in vulnerability databases; details thin in reviewed sources

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 5/5. Free open source; self-host costs nothing
  • Ease of use: 3/5. Self-host setup; chart complaints reported
  • Feature depth: 3/5. Multi-asset tracking; corporate-action gaps questioned
  • Support quality: 2/5. Community-only support found; no SLA
  • Security posture: 2/5. Auth bypass CVE pre-v3.4; two more CVEs
  • Yes Free tier Self-hosted, AGPL-3.0
  • 456 points Hacker News launch Aug 2023 thread
  • 3 CVEs in sources Incl. auth bypass pre-v3.4

Pricing

Self-hosted

Free

  • Full dashboard
  • AGPL-3.0 open source
  • You host, update, and secure it

Security

Multiple CVEs in reviewed sources, including an auth bypass fixed in v3.4 — patch before trusting it with financial data.

  • CVE-2026-47127: Auth bypassAffects all Ghostfolio versions prior to 3.4³
  • CVE-2026-59709Medium severity, CVSS 4.3⁴
  • CVE-2026-59708Listed in vulnerability databases; details thin in reviewed sources⁵

What users say

Self-hosters on Reddit and Hacker News like consolidating multi-broker net worth but question chart accuracy and corporate-action handling.

“I'm trying to consolidate all my investment tracking into a single dashboard instead of juggling spreadsh…”
Reddit, r/selfhosted
“Does it handle stock splits, consolidations, dividends etc?”
Hacker News
“I built a Trading 212 -> Ghostfolio sync tool for auto portfolio tracking”
Reddit, r/homelab
Full analysis

Based on 15 public sources; no numeric review ratings or vendor pricing pages found.

Free, privacy-first self-hosted net-worth tracker — great for DIYers, wrong if you won't run and patch a server.

Methodology

Based on 15 public sources; no numeric review ratings or vendor pricing pages found.

Read how a report is made.

Sources

  1. Ghostfolio – Official siteghostfol.io
    official
  2. Ghostfolio on GitHubgithub.com
    official
  3. CVE-2026-47127: Ghostfolio Auth Bypasssentinelone.com
    security
  4. CVE-2026-59709: Medium, CVSS 4.3echelongraph.io
    security
  5. CVE-2026-59708cve.imfht.com
    security
  6. Hacker News launch threadnews.ycombinator.com
    news
  7. Self-hosted portfolio tracker discussionreddit.com
    review
  8. Trading 212 sync toolreddit.com
    review
  9. Actual vs Ghostfolio comparisonlibhunt.com
    review
  10. Start9 community: Ghostfolio vs Firefly IIIcommunity.start9.com
    review

Add this review to your site

This check for Ghostfolio says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Ghostfolio Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.