CVE-2026-53620: Growi, Inc Growi

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs. If this vulnerability is exploited, an authenticated attacker could retrieve, tamper with, and/or delete the other user's bookmark data.

Affected products

• Growi, Inc Growi: up to and including v8.0.0

Published 2026-08-31. Last modified 2026-08-31.