CVE-2026-41951
CVSS Score
7.2
EPSS Score
0.0%
EPSS Percentile
0th
Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI.
| Vendor | growi, inc. |
| Product | growi |
| Published | May 11, 2026 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for growi, inc. growi
Be the first to know when new high vulnerabilities affecting growi, inc. growi are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Affected Versions
GROWI, Inc. / GROWI
v7.5.0 and earlier