2026-03-16 · 2 min · BitNinja Team

GROWI Vulnerability: Authorization Bypass Alert

The recent discovery of CVE-2026-25083 highlights a significant vulnerability in GROWI's OpenAI API endpoints. This security flaw allows unauthorized users to access and manipulate threads and messages belonging to other users. This critical lapse in authorization affects vers...