JeecgBoot CVE-2026-108667

Exploitation requires an authenticated account on the JeecgBoot platform with at least low privileges (CVSS PR:L) and network reachability to the application's /airag/prompts/revertRecycleBin endpoint; the attacker must know or enumerate valid deleted-template IDs. The AiRAG/AI prompts module must be present and in use for the restored templates to have any effect. Limiting factors: valid credentials are mandatory (not exploitable by fully unauthenticated attackers), no user interaction is needed, and impact is confined to reversing administrative deletions of prompt templates rather than any data disclosure or system compromise.

This is a genuinely low-severity, low-priority issue despite being publicly exploitable. The CVSS 4.0 base score of 5.3 reflects the reality of the flaw: the only impact is low integrity (VI:L), with no confidentiality (VC:N) or availability (VA:N) consequences - an attacker can merely undo an administrator's deletion of AI prompt templates by clearing recycle-bin flags. The vector is network-reachable and low-complexity (AV:N/AC:L/AT:N/UI:N), but crucially requires an authenticated low-privileged account (PR:L), which sharply limits the attacker population to existing platform users. Public POC code exists (VulnCheck-provided Python exploit), but there is NO CISA KEV listing and no EPSS score was provided in the input, so there is no signal of active or widespread exploitation - POC availability is a distinct signal from exploitation and should not be conflated with it. No SSVC decision data was supplied. Net assessment: a real but minor broken-access-control defect best treated as routine patch-cycle hygiene rather than an emergency; the integrity impact is reversible administrative state, not code execution or data theft.

A low-privileged authenticated user of a JeecgBoot deployment (≤3.9.5) who should not have administrative rights sends a crafted PUT request to /airag/prompts/revertRecycleBin supplying the IDs of AI prompt templates an administrator had deleted, causing those templates to be restored and reappear in active use. A public Python POC from VulnCheck demonstrates exactly this request. Because CVSS is PR:L, the attacker must first hold a valid (even minimally privileged) account, and the complexity is low once authenticated.