https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 13:02:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-276158 EUVD-2026-276158 https://cve.radiocsirt.org/vuln/euvd-2026-276158 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25083 <p>GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant&#39;s identifier may view and/or tamper the other user&#39;s threads/messages.</p> <p>GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant&#39;s identifier may view and/or tamper the other user&#39;s threads/messages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25083 https://cve.radiocsirt.org/vuln/ghsa-c69x-9x9c-p9v7 <p>GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant&#39;s identifier may view and/or tamper the other user&#39;s threads/messages.</p> <p>GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant&#39;s identifier may view and/or tamper the other user&#39;s threads/messages.</p> https://cve.radiocsirt.org/vuln/ghsa-c69x-9x9c-p9v7 https://cve.radiocsirt.org/vuln/jvndb-2026-000039 <p>GROWI provided by GROWI, Inc. contains the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/862.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Missing authorization in the OpenAI thread/message API endpoints (CWE-862) - CVE-2026-25083&lt;/li&gt;&lt;li&gt;This can be exploited only when an attacker knows a shared AI assistant&#39;s identifier&lt;/li&gt;&lt;/ul&gt;Sho Odagiri of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to GROWI, Inc. and coordinated. After the coordination was completed, GROWI, Inc. reported the case to JPCERT/CC to notify users of the solution through JVN.</p> <p>GROWI provided by GROWI, Inc. contains the following vulnerability.&lt;a href=&#39;https://cwe.mitre.org/data/definitions/862.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Missing authorization in the OpenAI thread/message API endpoints (CWE-862) - CVE-2026-25083&lt;/li&gt;&lt;li&gt;This can be exploited only when an attacker knows a shared AI assistant&#39;s identifier&lt;/li&gt;&lt;/ul&gt;Sho Odagiri of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to GROWI, Inc. and coordinated. After the coordination was completed, GROWI, Inc. reported the case to JPCERT/CC to notify users of the solution through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000039