growchief

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

growchief records in CISA KEV

No growchief vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-74432 CVE-2026-110773

Missing authorization in GrowChief exposes users across all organizations

MEDIUM 57

GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00208 Published 2026-10-14 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0