EUVD-2026-96549
GHSA-m6j9-w9gv-6v9c
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privileged user
-
DeliverySend PUT/POST to /airag/word/edit
-
ExploitBypass missing authorization check
-
ExecutionOverwrite shared word template
-
ImpactVictims generate documents from tampered template
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a valid authenticated JeecgBoot account of any privilege level (PR:L) and reachability of the AIRAG word-template module endpoint /airag/word/edit; the attacker simply issues a PUT or POST request to overwrite templates owned or shared by other users because the edit handler performs no authorization/ownership check. Limiting factors: exploitation needs valid credentials (not anonymous), the airag word-template feature must be deployed and in use, and impact is confined to the integrity of shared word templates with no data disclosure or service disruption. |
| Impact | Signals are consistent and point to a moderate access-control integrity issue rather than a top-priority emergency. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) and base score 5.3 (MEDIUM) describe a network-reachable, low-complexity flaw requiring low privileges and no user interaction, with impact limited to integrity (VI:L) and no confidentiality or availability loss. This matches CWE-862 (Missing Authorization): the attacker must already be an authenticated, low-privileged JeecgBoot user who can then modify shared word templates they should not control. A public POC exists (reported by VulnCheck, exploit script on GitHub), which raises practical exploitability, but the vulnerability is NOT in CISA KEV and no active exploitation is indicated, so this is publicly demonstrated rather than confirmed exploited in the wild. No EPSS score was provided in the input, so probabilistic exploitation likelihood cannot be factored in, and no SSVC decision data was supplied. Net: a real, easily-triggered authorization gap that warrants timely patching, but its medium severity and integrity-only, authenticated nature argue against treating it as a critical drop-everything item unless the affected templates feed sensitive document workflows. |
| Exploit ScenarioDerived | A low-privileged but authenticated JeecgBoot user sends a crafted PUT or POST request to /airag/word/edit and overwrites a shared word template that other users depend on, injecting malicious or misleading content into every document later generated from it. A public POC (poc_airag_word_template_edit.py) demonstrates the request, and because the flaw is network-accessible with low complexity and no user interaction, any account on the platform can trigger it. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 10, 2026
Any low-privileged authenticated user of JeecgBoot through 3.9.5 can overwrite shared Word document templates by sending PUT or POST requests to the /airag/word/edit endpoint, because the AigcWordTemplateController edit handler performs no authorization or ownership check. The impact is limited to integrity of shared templates used by other users for document generation - no data disclosure or service disruption - with an assessed severity of CVSS 3.1 5.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N). Publicly available exploit code exists (a proof-of-concept Python script published on GitHub), though there is no indication of confirmed active exploitation (no CISA KEV listing), and exploitation requires valid credentials plus a deployment where the AIRAG word-template feature is enabled and in use.
RemediationAI
No vendor-released patch identified at time of analysis for CVE-2026-108610 as it affects JeecgBoot through 3.9.5, so remediation must be compensating until an upstream fix is published. The most effective control is to require administrator-only access to the /airag/word/edit endpoint at a reverse proxy, API gateway, or WAF in front of JeecgBoot - block or challenge PUT and POST requests to /airag/word/edit for any session lacking an admin role - accepting that this must be updated if you upgrade JeecgBoot; a stricter option is to disable the AIRAG word-template feature entirely if your deployment does not need AI-generated documents, which removes the attack surface but also removes that functionality. If the endpoint must remain exposed, harden the application layer by adding an explicit ownership or role check in AigcWordTemplateController before persisting template changes (the upstream fix will likely take this form, so track the project repository for a patched release and the VulnCheck advisory at https://www.vulncheck.com/advisories/jeecgboot-through-3.9.5-missing-authorization-via-airag-word-edit-endpoint). Because exploitation only requires any authenticated account, also audit and prune low-privilege and stale accounts, restrict who can hold credentials that can reach the AIRAG module, and monitor server logs for PUT/POST activity against /airag/word/edit followed by unexpected template content changes; periodic integrity reviews or version-controlled backups of shared word templates let you detect and roll back unauthorized modifications, at the cost of ongoing operational overhead.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
JeecgBoot is a Java/Spring Boot low-code development platform, and the affected component is the AIRAG module (jeecg-boot-module-airag), specifically AigcWordTemplateController, whose edit handler is exposed at /airag/word/edit. The root cause is CWE-862 (Missing Authorization): the controller endpoint relies on the caller holding a valid session but never verifies that the caller owns the template being edited or holds an administrative role, so the authorization decision that should gate template mutation is absent. Because Word templates are shared resources consumed by other users to generate documents, an attacker with any valid account can silently alter the content that downstream generated documents will contain. The provided CPE (cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:*) indicates all tracked versions are affected, and the referenced source lines (L96-L107 of AigcWordTemplateController.java at commit e3b9dc0a) correspond to the vulnerable handler. Note that the vendor-supplied tag labeling this an 'Authentication Bypass' is imprecise: authentication is still required, and the defect is genuinely an authorization/ownership-check gap, which matches both the CWE-862 classification and the assessed PR:L vector.
Know when Jeecgboot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Network-reachable endpoint (AV:N/AC:L) exploitable by any authenticated low-privileged user (PR:L) with no interaction; only shared-template integrity is affected (I:L), no confidentiality or availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates. Low-privileged attackers can send PUT or POST requests to /airag/word/edit to overwrite shared templates that other users rely on to generate documents.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Unauthenticated report data exfiltration in JimuReport (JeecgBoot) through version 2.5.0 lets remote attackers export th
Broken access control in JeecgBoot through 3.9.2 lets authenticated low-privilege users reach the OpenApiAuthController
Privilege escalation in JeecgBoot through 3.9.5 lets any authenticated user approve their own pending tenant administrat
Missing authorization in the saveDeptRolePermission endpoint of JeecgBoot's SysDepartPermissionController lets any authe
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC
JeecgBoot through 3.9.5 ships a system log controller whose batch-delete handler performs no authorization check, so any
Database credential disclosure in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to retrieve JDBC
Missing authorization in JeecgBoot through 3.9.5 lets any authenticated user enumerate record IDs through the unguarded
Authenticated low-privileged users of JeecgBoot through 3.9.5 can retrieve any other user's stored password ciphertext t
Authenticated users of any privilege level on JeecgBoot through 3.9.5 can rewrite DingTalk, WeCom, or Feishu third-party
Exploit-DB