EUVD-2026-96555
GHSA-fjc9-j739-rv97
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privileged user
-
DeliveryEnumerate target evaluator record ids
-
ExploitSend crafted DELETE to /airag/extData/deleteBatch
-
ExecutionBypass absent owner/tenant check
-
ImpactDelete other users' AI evaluator and test-tracking records
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a valid authenticated session with only low privileges (PR:L) on a reachable JeecgBoot instance, and the AiRAG/AI module must be deployed and contain evaluator or test-tracking records to destroy. The limiting factors are: authentication is mandatory (not exploitable by anonymous attackers), impact is confined to deletion of AI evaluator/test-tracking data (no confidentiality loss and no code execution), and exposure depends on the AiRAG feature being enabled - environments not using the AI module have no exploitable records. No special non-default configuration or user interaction is otherwise needed once authenticated. |
| Impact | This is a medium-severity broken-access-control flaw (CWE-862), not a system-compromise issue. The provided CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms network-reachable, low-complexity exploitation but requires an authenticated low-privileged account (PR:L), so it is not usable by fully unauthenticated attackers. Impact is deliberately narrow: VC:N (no data disclosure), VI:L and VA:L (only limited integrity/availability loss), reflecting that the bug deletes AI evaluator and test-tracking records rather than enabling code execution or full data destruction. A public PoC exists (VulnCheck advisory plus a GitHub exploit script), which raises operational likelihood, but there is no CISA KEV listing - so this is 'publicly available exploit code exists', NOT confirmed active exploitation. No EPSS score was provided in the input, so exploitation-probability cannot be quantified here and should be checked separately. Net assessment: a real but bounded data-integrity/availability issue affecting a specific AI module; it warrants patching on internet-exposed JeecgBoot instances but is below the priority of a critical RCE or an unauthenticated flaw. |
| Exploit ScenarioDerived | An attacker who holds or self-registers any low-privileged account on an exposed JeecgBoot instance sends a crafted request with comma-separated ids to DELETE /airag/extData/deleteBatch; because the handler performs no owner or tenant check, it deletes AI evaluator and test-tracking records belonging to other users or tenants. A public PoC script (poc_airag_extdata_delete_batch.py) automates this, and the low attack complexity (AC:L) with no user interaction (UI:N) makes it trivial to run once authenticated. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 10, 2026
Missing authorization in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to delete AI evaluator records via the AiragExtDataController deleteBatch handler. The endpoint DELETE /airag/extData/deleteBatch accepts comma-separated IDs and lacks owner or tenant checks, enabling deletion of other users' evaluator and test-tracking records. Publicly available exploit code exists, but exploitation requires a valid low-privileged session and the AiRAG module to be enabled; this is a medium-severity broken access control issue (CWE-862) with no confidentiality or code execution impact.
RemediationAI
No vendor-released patch is identified in the provided data at time of analysis. Until a patch is available, consider disabling the AiRAG module if AI evaluation features are not essential, which removes the vulnerable endpoint but eliminates AI functionality. Alternatively, implement a custom authorization check in AiragExtDataController.deleteBatch to verify that the requesting user owns or has tenant access to the specified record IDs; this requires code changes and testing. Monitor server logs for suspicious DELETE requests to /airag/extData/deleteBatch with comma-separated IDs. Given that publicly available exploit code exists, prioritize these mitigations. For updates, refer to the VulnCheck advisory at https://www.vulncheck.com/advisories/jeecgboot-through-3.9.5-missing-authorization-via-airag-extdata-deletebatch.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
JeecgBoot is a Java-based low-code platform built on Spring Boot. The AiRAG (AI Retrieval-Augmented Generation) module includes a controller, AiragExtDataController, which handles REST endpoints for managing AI evaluator data. The deleteBatch method at lines 138-144 processes a DELETE request to /airag/extData/deleteBatch, accepting a comma-separated list of record IDs. Due to CWE-862 (Missing Authorization), the method does not verify that the authenticated user owns the records or belongs to the same tenant, allowing any authenticated user with low privileges to delete arbitrary records. The CPE cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:* indicates the product is JeecgBoot, and the advisory specifies versions through 3.9.5 are affected. The AiRAG module must be enabled for the endpoint to be reachable.
Know when Jeecgboot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Network-reachable, low-complexity request needing an authenticated low-privileged account (PR:L); no confidentiality impact, with limited integrity/availability loss from deleting scoped records.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator records. Low-privileged attackers can send comma-separated ids to DELETE /airag/extData/deleteBatch, which lacks owner or tenant checks, deleting other users' evaluator and test-tracking records.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Unauthenticated report data exfiltration in JimuReport (JeecgBoot) through version 2.5.0 lets remote attackers export th
Broken access control in JeecgBoot through 3.9.2 lets authenticated low-privilege users reach the OpenApiAuthController
Privilege escalation in JeecgBoot through 3.9.5 lets any authenticated user approve their own pending tenant administrat
Missing authorization in the saveDeptRolePermission endpoint of JeecgBoot's SysDepartPermissionController lets any authe
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC
JeecgBoot through 3.9.5 ships a system log controller whose batch-delete handler performs no authorization check, so any
Database credential disclosure in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to retrieve JDBC
Missing authorization in JeecgBoot through 3.9.5 lets any authenticated user enumerate record IDs through the unguarded
Authenticated low-privileged users of JeecgBoot through 3.9.5 can retrieve any other user's stored password ciphertext t
Authenticated users of any privilege level on JeecgBoot through 3.9.5 can rewrite DingTalk, WeCom, or Feishu third-party
Exploit-DB