EUVD-2026-96551
GHSA-75xg-h92m-9hfq
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate with low-privileged account
-
DeliveryEnumerate shared template IDs
-
ExploitSend DELETE to /airag/word/deleteBatch with comma-separated ids
-
ExecutionServer skips authorization check
-
ImpactShared word templates permanently deleted
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a valid authenticated JeecgBoot account with at least low-privilege access (PR:L) and network reachability to the application's /airag/word/deleteBatch endpoint, which is part of the AIRAG word-template module - so instances that have the airag module deployed and that grant accounts to semi-trusted or self-registered users are most exposed. No user interaction, no special non-default configuration, and no elevated/admin role are needed beyond any authenticated session. The limiting factor is authentication: an attacker with no credentials cannot reach this directly, so realistic risk is highest in multi-tenant or broadly-provisioned deployments; impact is bounded to deletion (integrity/availability) of shared word templates with no data disclosure. |
| Impact | This is a genuinely medium-severity, low-priority issue rather than a critical threat. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) with score 5.3 and CWE-862 (Missing Authorization) indicates a network-reachable, low-complexity flaw that nonetheless requires a valid low-privileged account (PR:L), which materially limits the attacker population to existing users of the instance. Impact is confined to integrity and availability of word templates (VI:L/VA:L) with no confidentiality exposure (VC:N) and no scope change - an authenticated user can delete shared-library templates they should not be able to touch, i.e. unauthorized data destruction, not RCE or data theft. A public POC exists (reported by VulnCheck), which raises the practical likelihood of opportunistic abuse, but there is no CISA KEV listing and no EPSS score was provided, so there is no evidence of active or widespread exploitation. Signals are internally consistent: the CVSS vector, description, and CWE all agree this is an authenticated, limited-impact access-control flaw. Bottom line: patch in the normal cycle; it is not an emergency, but the public POC plus a likely-large shared-user model (common in low-code platforms) means it should not be ignored where untrusted users hold accounts. |
| Exploit ScenarioDerived | A user with a legitimate low-privileged JeecgBoot account authenticates, then issues a DELETE request to /airag/word/deleteBatch supplying a comma-separated list of template IDs belonging to the shared library. Because the deleteBatch handler omits an ownership/authorization check, the server permanently deletes templates the user never owned or had rights to remove. A public Python POC (github-poc) automating this request is already available, lowering the skill barrier to a copy-paste attack. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 10, 2026
Missing authorization in JeecgBoot through version 3.9.5 allows authenticated low-privileged users to delete arbitrary word templates from the shared library via the /airag/word/deleteBatch endpoint. The flaw resides in the AigcWordTemplateController's deleteBatch handler, which fails to enforce proper access controls (CWE-862), enabling an attacker with any valid account to permanently remove templates by sending a DELETE request with comma-separated IDs. Publicly available exploit code exists, and while the impact is limited to integrity and availability of templates (no confidentiality loss), it represents a medium-severity, low-priority risk for deployments exposing the AIRAG module to semi-trusted users.
RemediationAI
No vendor-released patch identified at time of analysis. Administrators should prioritize upgrading to a version beyond 3.9.5 once a fix is announced. In the interim, specific compensating controls include: disabling or removing the AIRAG word-template module if not essential (side effect: loss of AI template management functionality); restricting network access to the /airag/word/deleteBatch endpoint via firewall or WAF rules to trusted internal IPs or authenticated administrative users (side effect: may break legitimate template management workflows for non-admin users); enforcing strict account provisioning so that only fully trusted users obtain JeecgBoot accounts (side effect: reduces usability for self-registration or multi-tenant scenarios); and monitoring application logs for suspicious DELETE requests to that endpoint. Developers should implement proper authorization checks (e.g., verify user ownership or role permissions) before allowing template deletion. For updates, monitor the VulnCheck advisory at https://www.vulncheck.com/advisories/jeecgboot-through-3.9.5-missing-authorization-via-airag-word-deletebatch.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
JeecgBoot is a Java-based low-code development platform, and the affected component is the AIRAG word-template module (jeecg-boot-module-airag). The AigcWordTemplateController's deleteBatch handler (lines 130-137 in the referenced source) lacks proper authorization checks, falling under CWE-862 (Missing Authorization). This means that while the application may verify that a user is authenticated, it does not verify whether that user has permission to delete templates from the shared library-such as ownership, role, or tenant isolation checks. The endpoint accepts DELETE requests to /airag/word/deleteBatch with a comma-separated list of template IDs, allowing bulk deletion in a single request. The CPE cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:* indicates all versions of the product are potentially affected, but the description specifies through 3.9.5. The vulnerability is network-exploitable with low complexity and requires only a low-privileged authenticated account (PR:L), with no user interaction, resulting in low integrity and availability impact (no confidentiality impact). This aligns with the assessed CVSS 3.1 vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L.
Know when Jeecgboot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Network endpoint with low complexity but requires an authenticated low-privileged account (PR:L); only integrity and availability of templates affected (I:L/A:L), no confidentiality impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delete word templates. Attackers can send a DELETE request to /airag/word/deleteBatch with comma-separated ids to permanently delete any templates in the shared library.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Unauthenticated report data exfiltration in JimuReport (JeecgBoot) through version 2.5.0 lets remote attackers export th
Broken access control in JeecgBoot through 3.9.2 lets authenticated low-privilege users reach the OpenApiAuthController
Privilege escalation in JeecgBoot through 3.9.5 lets any authenticated user approve their own pending tenant administrat
Missing authorization in the saveDeptRolePermission endpoint of JeecgBoot's SysDepartPermissionController lets any authe
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC
JeecgBoot through 3.9.5 ships a system log controller whose batch-delete handler performs no authorization check, so any
Database credential disclosure in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to retrieve JDBC
Missing authorization in JeecgBoot through 3.9.5 lets any authenticated user enumerate record IDs through the unguarded
Authenticated low-privileged users of JeecgBoot through 3.9.5 can retrieve any other user's stored password ciphertext t
Authenticated users of any privilege level on JeecgBoot through 3.9.5 can rewrite DingTalk, WeCom, or Feishu third-party
Exploit-DB