Executive brief
Gophish is vulnerable to Incorrect Access Control in github.com/gophish/gophish
Affected products
- Go github.com/gophish/gophish
Junglewise Threat Intelligence
CVE-2025-70963: GO-2026-4455 - Gophish is vulnerable to Incorrect Access Control in github.com/gophish/gophish
CVE-2025-70963 · Severity: medium · CVSS 4 · Published 2026-02-17
Technologies: github.com/gophish/gophish (Go). Vendors: Go.
Related threats
- Gophish denial of service via Office document upload in ApplyTemplate
- GO-2025-3361 - GoPhish sends cleartext passwords in github.com/gophish/gophish
- GO-2022-0987 - Gophish before 0.12.0 vulnerable to Open Redirect in github.com/gophish/gophish
- GO-2023-1982 - Gophish vulnerable to Server-Side Request Forgery in github.com/gophish/gophish
- GO-2023-1936 - Gophish XSS Vulnerability in github.com/gophish/gophish