Vulnerability · Published Sep 1, 2026 · Assigned by VulnCheck

CVE-2026-84205GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval

Medium 6.5

In plain English

A medium-severity authorization bypass via user-controlled key in growi from growilabs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.4%top 64.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against a query parameter but returns the revision identified by the path parameter without confirming they reference the same page. Authenticated attackers can pair a page identifier they can access with an arbitrary revision identifier to read revision content from pages they lack permission to view.

Affected products (as reported)

Vendor	Product	Versions
growilabs	growi	0 – through 8.0.2

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/growilabs/growi product
https://github.com/growilabs/growi/pull/11810 patch, issue-tracking
https://github.com/growilabs/growi/commit/d298e0b1dbbf568c99db657fa0f7e90f72ddc59b patch
https://github.com/growilabs/growi/blob/v8.0.2/apps/app/src/server/routes/apiv3/revisions.js technical-description
VulnCheck Advisory: GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval third-party-advisory