CVE-2026-53620 — GROWI, Inc. / GROWI

CVE-2026-53620

GROWI, Inc. / GROWI PUBLISHED

Description (CNA)

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an authenticated attacker could retrieve, tamper with, and/or delete the other user's bookmark data.

Affected (CNA)

Vendor / product	Versions
GROWI, Inc. / GROWI	affected 0 through v8.0.0

CWE

CWE-639

References

https://growi.co.jp/news/46/
https://jvn.jp/en/jp/JVN42348352/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.