GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users… (CVE-2026-110773)

The vulnerability in GrowChief up to version 0.3.0 is due to the absence of an authorization guard (IsSuperAdmin) in the getAllUsers handler. As a result, any authenticated user can access the endpoint GET /users/all-users and retrieve sensitive user information across all organizations. This allows low-privilege attackers to enumerate user details such as IDs, emails, names, and organization IDs by sending requests with empty or short search parameters.

An attacker with any authenticated account can enumerate user information across all tenants, potentially exposing user identifiers, email addresses, names, and organization affiliations. This information disclosure could aid in further targeted attacks or social engineering but does not directly allow modification or denial of service.

No patch or official fix is currently documented. Since this is not a cloud service, remediation depends on vendor updates. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected endpoint or implement additional authorization checks to ensure only super administrators can access user listings.