JeecgBoot CVE-2026-108664

Requires a valid authenticated JeecgBoot account of any privilege level (PR:L); no administrative role is needed, which is the core of the flaw. The attacker must reach the application's /airag/prompts/list and /airag/prompts/queryById endpoints over the network, meaning the AIRAG (AI prompts) module must be deployed and enabled. There are no user-interaction or special non-default configuration requirements beyond having the AIRAG feature present. The limiting factor is the authentication requirement - fully unauthenticated attackers cannot exploit this - and the impact is confined to reading prompt-template data (confidentiality only), with no write or availability effect.

This is a genuine but modest-severity information-disclosure issue, not a critical priority. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N, 5.3 Medium) is internally consistent with the description: network-reachable, low attack complexity, requires an already-authenticated low-privileged account (PR:L), no user interaction, and only low confidentiality impact with zero integrity or availability impact. A public PoC exists (reported by VulnCheck), which raises practical exploitability for anyone who already holds a foothold account. However, the CVE is NOT on the CISA KEV list and no EPSS score was provided, so there is no evidence of active or widespread exploitation - the signal here is 'publicly available exploit code exists,' which is distinct from in-the-wild use. The requirement for valid authentication (PR:L) and the confidentiality-only impact (read access to AI prompt templates, model parameters, and creator metadata) meaningfully cap real-world risk: this is a horizontal/BOLA-style authorization bypass useful for internal reconnaissance and data harvesting, not a direct path to code execution or takeover. No key signals conflict; the main missing data is EPSS and any KEV confirmation, both of which point to lower urgency than the CVSS base alone might suggest.

An attacker who holds any valid low-privileged JeecgBoot account calls the unguarded /airag/prompts/list endpoint to enumerate prompt template IDs, then calls the AiragPromptsController queryById handler for each ID to read templates, model parameters, and creator details belonging to administrators and other tenants. A public Python PoC (poc_airag_prompt_read.py) automates this harvesting. Because the flaw is network-reachable with low complexity and needs no user interaction, exploitation is reliable once any foothold credential is obtained.