EUVD-2026-19162Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | Real-world risk is MODERATE to HIGH despite the 7.3 CVSS score. The vulnerability combines several concerning factors: unauthenticated remote access (PR:N), network-based attack vector (AV:N), low attack complexity (AC:L), and impacts to confidentiality, integrity, and availability (C:L/I:L/A:L). However, no CISA KEV listing exists and no public exploit identified at time of analysis, indicating the vulnerability has not been observed in active exploitation campaigns. The SSVC framework would classify this as requiring prompt remediation given it affects an AI-enabled business module where authentication bypass could expose proprietary AI tools, chat logs, or business data. Attack complexity is genuinely low-an unauthenticated HTTP request to the vulnerable endpoint would likely suffice. The limited impact scope (Low ratings across CIA triad) suggests exploitation grants partial access rather than full system compromise, but unauthorized access to AI business tools still poses data exposure and operational risks. Organizations running JeecgBoot in production environments should prioritize patching, especially if the AI Chat Module is deployed in internet-facing configurations. |
| Exploit ScenarioDerived | An external attacker identifies a JeecgBoot 3.9.0 or 3.9.1 installation with the AI Chat Module enabled. Without requiring credentials, the attacker sends HTTP requests directly to vulnerable endpoints in JeecgBizToolsProvider.java, bypassing authentication controls. The attacker gains unauthorized access to AI chat functionality, potentially extracting sensitive business data from chat histories, manipulating AI tool configurations, or injecting malicious prompts to extract proprietary information processed by the AI module. Given the low attack complexity and network accessibility, exploitation requires only knowledge of the vulnerable endpoint paths and basic HTTP client capabilities. No public exploit code exists at time of analysis, but the straightforward nature of missing authentication vulnerabilities means proof-of-concept development would be trivial for attackers familiar with the JeecgBoot framework. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 06, 2026
Missing authentication in JeecgBoot 3.9.0 and 3.9.1 allows unauthenticated remote attackers to access the AI Chat Module functionality without credential verification. The vulnerability resides in JeecgBizToolsProvider.java within the jeecg-module-system component. Vendor-released patches are available via GitHub commits (b7c9aeba and 2c1cc88b) pending inclusion in the next official release. No public exploit code or active exploitation confirmed at time of analysis, though the low attack complexity (AC:L) and network attack vector (AV:N) with no authentication required (PR:N) indicate trivial exploitation potential.
RemediationAI
Apply the vendor-released patches available via GitHub commits b7c9aeba7aefda9e008ea8fe4fc3daf08d0c5b39 and 2c1cc88b8d983868df8c520a343d6ff4369d9e59, accessible through pull request #9463 (https://github.com/jeecgboot/JeecgBoot/pull/9463). These commits introduce authentication enforcement to the affected JeecgBizToolsProvider.java component and are scheduled for inclusion in the next official JeecgBoot release. Organizations unable to immediately apply upstream commits should consider temporary mitigations including disabling the AI Chat Module if not operationally required, implementing reverse proxy authentication controls in front of the affected endpoints, or restricting network access to the JeecgBoot application to trusted IP ranges. Monitor the official JeecgBoot GitHub repository (https://github.com/jeecgboot/JeecgBoot/) for the next tagged release version that will incorporate these security fixes. Verify remediation by testing that previously accessible AI Chat Module endpoints now properly enforce authentication requirements.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
JeecgBoot is a Java-based low-code development platform. This vulnerability affects the AI Chat Module (jeecg-airag), specifically the JeecgBizToolsProvider.java class in the jeecg-system-biz component. The issue is classified as CWE-306 (Missing Authentication for Critical Function), meaning the affected functionality fails to enforce authentication checks before granting access. The CVSS vector indicates network accessibility (AV:N) with low complexity (AC:L) and no privileges required (PR:N), suggesting the vulnerable endpoint is exposed without proper authentication middleware or access control filters. The affected code paths in JeecgBizToolsProvider.java likely expose AI chat functionality or business tool operations that should be restricted to authenticated users. The CPE identifier confirms impact to the JeecgBoot product, though specific version enumeration is limited in the provided CPE string.
Know when Jeecgboot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to missing authentication. The attack can be executed remotely. The name of the patch is b7c9aeba7aefda9e008ea8fe4fc3daf08d0c5b39/2c1cc88b8d983868df8c520a343d6ff4369d9e59. It is best practice to apply a patch to resolve this issue. The project fixed the issue with a commit which shall be part of the next official release.
Executive ViewAI
JeecgBoot versions 3.9.0 and 3.9.1 contain a missing authentication vulnerability in the AI Chat Module that allows unauthenticated remote attackers to bypass credential verification and access sensitive functionality. Any organization deploying these versions exposes the AI Chat Module to unauthorized access without requiring user credentials, creating immediate risk of data exfiltration and system compromise.
Apply vendor patch (GitHub commits b7c9aeba or 2c1cc88b). Until patch deployment is complete, implement network-level access controls: restrict inbound traffic to the AI Chat Module endpoint to known trusted IP ranges, disable the AI Chat Module if not in active use, and enforce reverse proxy authentication requiring valid credentials before traffic reaches the vulnerable component.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Unauthenticated report data exfiltration in JimuReport (JeecgBoot) through version 2.5.0 lets remote attackers export th
Broken access control in JeecgBoot through 3.9.2 lets authenticated low-privilege users reach the OpenApiAuthController
Privilege escalation in JeecgBoot through 3.9.5 lets any authenticated user approve their own pending tenant administrat
Missing authorization in the saveDeptRolePermission endpoint of JeecgBoot's SysDepartPermissionController lets any authe
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC
JeecgBoot through 3.9.5 ships a system log controller whose batch-delete handler performs no authorization check, so any
Database credential disclosure in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to retrieve JDBC
Missing authorization in JeecgBoot through 3.9.5 lets any authenticated user enumerate record IDs through the unguarded
Authenticated low-privileged users of JeecgBoot through 3.9.5 can retrieve any other user's stored password ciphertext t
Authenticated users of any privilege level on JeecgBoot through 3.9.5 can rewrite DingTalk, WeCom, or Feishu third-party
Exploit-DB