https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T13:02:45.711899+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-276158 EUVD-2026-276158 2026-10-20T13:02:45.715144+00:00 EUVD-2026-276158 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25083 fkie_cve-2026-25083 2026-10-20T13:02:45.715188+00:00

GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant's identifier may view and/or tamper the other user's threads/messages.

 https://cve.radiocsirt.org/vuln/ghsa-c69x-9x9c-p9v7 GHSA-c69x-9x9c-p9v7 2026-10-20T13:02:45.715238+00:00

GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant's identifier may view and/or tamper the other user's threads/messages.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000039 jvndb-2026-000039 2026-10-20T13:02:45.715256+00:00

GROWI provided by GROWI, Inc. contains the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/862.html' target='_blank'></a><ul><li>Missing authorization in the OpenAI thread/message API endpoints (CWE-862) - CVE-2026-25083</li><li>This can be exploited only when an attacker knows a shared AI assistant's identifier</li></ul>Sho Odagiri of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to GROWI, Inc. and coordinated. After the coordination was completed, GROWI, Inc. reported the case to JPCERT/CC to notify users of the solution through JVN.