A vulnerability has been found in GROWI up to 7.5.0 and classified as critical. Affected is an unknown function. The manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-41951. The attack may be initiated remotely. There is no available exploit.