Beveiligingsadvies

CVE-2026-25083

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-16 06:47:38

Laatst bijgewerkt 2026-03-16 14:59:21

Toegewezen door jpcert

CVSS-score 8.7

Status PUBLISHED

Beschrijving

GROWI OpenAI thread/message API endpoints do not perform authorization. Affected are v7.4.5 and earlier versions. A logged-in user who knows a shared AI assistant's identifier may view and/or tamper the other user's threads/messages.

← Alle CVE's bekijken Bekijk op cve.org ↗