CVE-2026-41951
HighSummary
A path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI.
Risk Assessment
This vulnerability could lead to unauthorized access to the system and execution of malicious code, posing a serious security threat to the organization.
Recommendation
It is recommended to update GROWI to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in GROWI
See all- CVE-2026-41040High
GROWI provided by GROWI, Inc. is vulnerable to a regular expression denial of service (ReDoS) via a crafted input string.
- CVE-2026-80191High
GROWI applies its page-viewer permission check to attachment requests only when the request carries an authenticated user. retrieveAttachmentFromIdParam skips the check when the user is null, so a request without a session skips the check and returns the file. An unauthenticated attacker with an attachment identifier can download the file even if the page is private. Version 8.0.2 checks both authenticated and unauthenticated requests.
Original NVD description (English source)
Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI.