CVE-2025-31945 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

An unauthenticated attacker can obtain other users' charger information...

CVE-2025-31945

CVE-2025-31945 affects Growatt Cloud Applications (Growatt Cloud Portal). Multiple connected sources confirm an unauthenticated attacker can obtain other users’ charger information, exposing sensitive user data. Public details indicate vulnerable component exposure and lack of server-side input v...