EUVD-2026-96550
GHSA-5m27-5f3c-wxjx
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privileged user
-
ExploitSend DELETE to /airag/word/delete with target id
-
ExecutionAuthorization check absent in handler
-
ImpactPermanently delete arbitrary shared word template
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a valid authenticated JeecgBoot account at any privilege level (CVSS PR:L) and that the AIRAG word-template module be deployed and reachable, exposing the /airag/word/delete endpoint. No user interaction, no admin rights, and no special non-default configuration beyond having the AIRAG feature in use are needed. Exploitation is limited to deleting word templates from the shared library - it cannot read data (no confidentiality impact) or achieve code execution; the principal limiting factor is the need for authentication, so exposure depends on how freely low-privileged accounts are provisioned. Affects JeecgBoot versions through 3.9.5. |
| Impact | This is a genuine-but-low-tier priority: a CWE-862 missing-authorization flaw where any already-authenticated low-privileged user can delete other users' word templates. The provided CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L) is internally consistent with the description - network reachable, low complexity, requires low privileges, no user interaction, with only limited integrity and availability impact and no confidentiality impact. Publicly available exploit code exists (a VulnCheck-referenced GitHub PoC), which raises operational likelihood, but the vulnerability is NOT listed in CISA KEV and no EPSS score was provided, so there is no evidence of active or widespread exploitation - PoC availability is a distinct signal from in-the-wild use and should not be conflated. No SSVC decision data was supplied. The realistic ceiling of harm is destruction of shared word templates (data loss / tampering), not code execution or data theft, so despite remote reachability this is a moderate-severity access-control bug rather than a critical one. The 'Authentication Bypass' tag appears to mischaracterize the issue - the attacker must already be authenticated; this is broken object-level authorization, not an auth bypass. |
| Exploit ScenarioDerived | A low-privileged user with any valid JeecgBoot account authenticates to the application and issues an HTTP DELETE to /airag/word/delete supplying the id of a word template they do not own. Because the AigcWordTemplateController delete handler performs no ownership/authorization check, the targeted template is permanently removed from the shared library. A public Python PoC referenced by VulnCheck automates this request, and the network attack vector with low complexity means it can be scripted to enumerate and delete many template IDs. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 10, 2026
Deleting word templates in JeecgBoot through 3.9.5 is not access-controlled: the AigcWordTemplateController delete handler behind DELETE /airag/word/delete accepts an id parameter from any authenticated account and permanently removes the referenced template from the shared library, including templates owned by other users. Exploitation is remote and requires only a valid low-privileged JeecgBoot login (CVSS PR:L) with the AIRAG word-template module deployed and reachable; publicly available exploit code exists, though there is no confirmation of active exploitation in the wild. Impact is confined to integrity and availability of the template library - no data disclosure, no code execution - making this a genuine but low-tier priority where exposure depends on how freely low-privileged accounts are provisioned.
RemediationAI
No vendor-released patch was identified at time of analysis, so remediation must currently rely on compensating controls while a fix is awaited; administrators running any JeecgBoot build up through 3.9.5 with the AIRAG module should track the VulnCheck advisory (https://www.vulncheck.com/advisories/jeecgboot-through-3.9.5-missing-authorization-via-airag-word-delete-endpoint) and the upstream controller source for an authorization check to be added to the delete handler (https://github.com/jeecgboot/JeecgBoot/blob/e3b9dc0aefe1943d9772b026f64ed671a7c82802/jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/wordtpl/controller/AigcWordTemplateController.java#L115-L122). The most direct mitigation is to block DELETE requests to /airag/word/delete at the reverse proxy, WAF, or API gateway for every role except trusted administrators - a trivially reversible rule, at the cost of breaking legitimate template deletion for non-admin users until the vendor adds a proper ownership/privilege check. If the AIRAG word-template feature is not in active use, disable or undeploy the jeecg-boot-module-airag module entirely, which removes the endpoint and its attack surface but also disables all AIRAG AI features. Additionally, tighten account provisioning so low-privileged or guest accounts are not issued where they are not needed, since authentication is the only prerequisite for exploitation; this reduces the pool of potential attackers but does not fix the underlying authorization gap. Finally, enable and monitor audit logging for template deletion events so unauthorized removals are at least detected, and maintain offline or versioned backups of the shared template library so deleted templates can be restored.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
JeecgBoot is a Java/Spring Boot-based low-code development platform, and the affected component is the AIRAG module's word-template feature (jeecg-boot-module-airag), specifically the AigcWordTemplateController class. The flaw is classified as CWE-862 (Missing Authorization): the delete endpoint at /airag/word/delete is exposed to any authenticated session without a server-side check that the caller holds the privilege required to manage or own the target template, so the handler acts on an attacker-supplied id without verifying authorization. The reference to the upstream source (AigcWordTemplateController.java, lines 115-122) confirms the handler is where the missing check resides, and the CPE string cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:* indicates all JeecgBoot versions up to and including 3.9.5 are in scope. Because the endpoint is a plain HTTP DELETE with no state-changing token or ownership validation, the attack surface is limited purely by whether the AIRAG word-template module is enabled and whether the attacker can obtain any authenticated account.
Know when Jeecgboot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Remote, low-complexity endpoint callable by any authenticated low-privileged user (PR:L), causing template deletion - limited integrity and availability impact, no confidentiality.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. Low-privileged attackers can send DELETE requests to /airag/word/delete with an id parameter to permanently remove any template from the shared library.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Unauthenticated report data exfiltration in JimuReport (JeecgBoot) through version 2.5.0 lets remote attackers export th
Broken access control in JeecgBoot through 3.9.2 lets authenticated low-privilege users reach the OpenApiAuthController
Privilege escalation in JeecgBoot through 3.9.5 lets any authenticated user approve their own pending tenant administrat
Missing authorization in the saveDeptRolePermission endpoint of JeecgBoot's SysDepartPermissionController lets any authe
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC
JeecgBoot through 3.9.5 ships a system log controller whose batch-delete handler performs no authorization check, so any
Database credential disclosure in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to retrieve JDBC
Missing authorization in JeecgBoot through 3.9.5 lets any authenticated user enumerate record IDs through the unguarded
Authenticated low-privileged users of JeecgBoot through 3.9.5 can retrieve any other user's stored password ciphertext t
Authenticated users of any privilege level on JeecgBoot through 3.9.5 can rewrite DingTalk, WeCom, or Feishu third-party
Exploit-DB