EUVD-2026-96553
GHSA-mxh2-28rw-2fwm
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain low-privileged authenticated session
-
DeliveryRequest /airag/extData/exportXls endpoint
-
ExploitMissing authorization check not enforced
-
ExecutionServer returns all users' evaluator data as XLS
-
ImpactExfiltrate cross-user AI evaluator records
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a valid authenticated JeecgBoot account of any privilege level (PR:L) and that the airag (AI RAG/evaluator) module exposing /airag/extData/exportXls is deployed and reachable. No user interaction, elevated role, or special non-default configuration beyond the airag module being present is needed. The limiting factors are: authentication is mandatory (not anonymous/pre-auth), impact is confined to read-only disclosure of airag_ext_data evaluator definitions and test-tracking records (no write or availability effect), and instances that do not deploy the airag module are not affected. |
| Impact | Signals align on a moderate, not critical, priority. The CVSS 4.0 base score of 5.3 (AV:N/AC:L/AT:N/PR:L/UI:N) describes a network-reachable, low-complexity flaw but one that requires an authenticated low-privileged account (PR:L) and yields only limited confidentiality impact (VC:L, with VI/VA:N) - no integrity or availability loss. A public POC exists (VulnCheck advisory plus a GitHub exploit script), which raises practical exploitability, but the issue is NOT in CISA KEV, so there is no confirmation of active exploitation. No EPSS score was provided in the input, so probabilistic exploitation likelihood cannot be weighed here, and no SSVC decision data was supplied. The net picture is a genuine but bounded information-disclosure bug: trivial for any logged-in user to trigger against a deployed airag module, yet gated behind authentication and limited to reading other users' AI-evaluator definitions and test-tracking records rather than full system compromise. Treat as a medium-priority patch, prioritized higher in multi-tenant deployments where low-privileged accounts are widely provisioned. |
| Exploit ScenarioDerived | A low-privileged but authenticated user of a JeecgBoot instance sends a single GET request to /airag/extData/exportXls; because the handler omits an authorization check, the server returns an Excel workbook containing every user's airag_ext_data evaluator definitions and test-tracking records. A public POC script (poc_airag_extdata_prompts_export.py) automates this, so no custom tooling is needed. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 10, 2026
Missing authorization in the AiragExtDataController exportXls handler of JeecgBoot (through 3.9.5) allows any authenticated account, regardless of role, to download every user's airag_ext_data records - AI evaluator definitions and test-tracking data - as an Excel workbook via a request to /airag/extData/exportXls. Exploitation requires a valid account of any privilege level (CVSS 3.1 AV:N/AC:L/PR:L/UI:N, scored 5.3) and only affects instances that actually deploy the airag module; publicly available exploit code exists, but there is no confirmed active exploitation (CISA KEV). Because the impact is read-only information disclosure (C:L, no integrity or availability effect), this is a moderate-priority exposure tied to the sensitivity of the exported AI evaluator and prompt data rather than a critical one.
RemediationAI
No vendor-released patch was identified at time of analysis; the only upstream reference is the source-code location of the flawed handler, not a tagged fixed release, so confirm the current patch state with the JeecgBoot maintainers or the VulnCheck advisory (https://www.vulncheck.com/advisories/jeecgboot-through-3.9.5-missing-authorization-via-airag-extdata-exportxls) before assuming a fix exists. If you build from source, add the same permission/role annotation used by sibling handlers (or an explicit admin-role check) to AiragExtDataController#exportXls and rebuild; the trade-off is maintaining a fork until upstream ships the fix. If patch-level changes are not feasible, block /airag/extData/exportXls at the reverse proxy, API gateway, or WAF for all roles except the small set that legitimately needs exports - this stops the disclosure but will break the Excel export feature for everyone not allow-listed, so scope the exception to named admin accounts. If the airag module is not in active use, undeploy/disable jeecg-boot-module-airag entirely, which removes the attack surface completely at the cost of the AI evaluator functionality. Restrict authenticated account provisioning and periodically review low-privilege accounts, since exploitation only needs any valid session. Finally, treat airag_ext_data as potentially compromised if the endpoint was reachable by non-admin users: review logs for GET requests to /airag/extData/exportXls and rotate any API keys, model credentials, or prompt templates that the exported evaluator definitions may have contained.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
JeecgBoot is a Java/Spring Boot low-code development platform whose modular architecture includes an optional airag (AI retrieval-augmented generation / evaluator) module. The vulnerable component is org.jeecg.modules.airag.prompts.controller.AiragExtDataController, a Spring MVC controller that exposes an exportXls handler which streams a query-result set into an Excel workbook. The root cause is CWE-862 (Missing Authorization): the exportXls mapping lacks the role/permission enforcement (e.g. @RequiresPermissions or equivalent check) applied to other endpoints in the same controller, so the framework's authentication filter - which accepts any valid session/JWT - is the only gate, and any low-privileged authenticated user passes it. The referenced source lines (AiragExtDataController.java#L190-L199) show the handler as shipped in committed upstream code. Data at risk is the airag_ext_data table, which stores evaluator definitions, prompt configurations, and test-tracking records; the CPE cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:* indicates the CPE dictionary does not version-bound the flaw, but the advisory scopes it to releases through 3.9.5. Secondary effects include possible exposure of embedded API keys or model endpoints captured inside prompt/evaluator definitions.
Know when Jeecgboot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Network endpoint, low complexity, but any authenticated user suffices so PR:L; only limited cross-user data is disclosed (C:L) with no integrity or availability impact and no scope change.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated user to export AI evaluator data. Low-privileged attackers can request /airag/extData/exportXls to download every user's airag_ext_data evaluator definitions and test-tracking records as an Excel workbook.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Unauthenticated report data exfiltration in JimuReport (JeecgBoot) through version 2.5.0 lets remote attackers export th
Broken access control in JeecgBoot through 3.9.2 lets authenticated low-privilege users reach the OpenApiAuthController
Privilege escalation in JeecgBoot through 3.9.5 lets any authenticated user approve their own pending tenant administrat
Missing authorization in the saveDeptRolePermission endpoint of JeecgBoot's SysDepartPermissionController lets any authe
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC
JeecgBoot through 3.9.5 ships a system log controller whose batch-delete handler performs no authorization check, so any
Database credential disclosure in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to retrieve JDBC
Missing authorization in JeecgBoot through 3.9.5 lets any authenticated user enumerate record IDs through the unguarded
Authenticated low-privileged users of JeecgBoot through 3.9.5 can retrieve any other user's stored password ciphertext t
Authenticated users of any privilege level on JeecgBoot through 3.9.5 can rewrite DingTalk, WeCom, or Feishu third-party
Exploit-DB