Authorization Bypass in GROWI Collaborative Editing Feature

CVE-2026-115624

What is CVE-2026-115624?

The GROWI collaborative editing feature contains a vulnerability that permits unauthorized modification of page drafts. This flaw arises from a missing authorization check, enabling users with read-only permissions, including guest users and those in pending or suspended states, to alter draft content. As such, the integrity of collaborative edits can be compromised, allowing unprivileged users to make changes that should be restricted.

References