EUVD-2026-96611
GHSA-x5p6-mp38-j8f4
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privilege user
-
ExploitCall getVideoRecords with another userId
-
ExecutionServer returns victim's records
-
ImpactHarvest prompts, task IDs and video URLs
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Object-level authorization, IDOR prevention
|
| Exploitation Conditions | Requires a valid authenticated account on the target JeecgBoot instance (PR:L) with access to the AIRAG video-generation feature; the attacker then supplies an arbitrary userId to the getVideoRecords handler of VideoGenerationController, which fails to verify ownership. Limiting factors: the AIRAG video module must be deployed and in use, the attacker must already hold a (even low-privilege) authenticated session, and the disclosed data is restricted to AI video-generation history metadata (prompts, task IDs, video and cover URLs) - no write access, no broader data, and no impact on instances not using the AIRAG video feature. |
| Impact | This is a genuine but moderate-severity information-disclosure issue, not a top-tier priority. The authoritative CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N) scores 5.3 (Medium) and is internally consistent with the description: a network-reachable but authenticated (PR:L) flaw with low attack complexity, no user interaction, and limited confidentiality impact only (no integrity or availability effect, no scope change). An insecure-direct-object-reference / authorization bypass (CWE-639) matching this exact signature is the correct reading. Exploitation signals are mixed: a public POC exists (VulnCheck-published Python script against the AIRAG video-history endpoint), which raises practical risk, but there is NO CISA KEV listing and NO EPSS score was provided in the input, so there is no evidence of active or widespread exploitation - POC availability must not be conflated with in-the-wild use. The impact ceiling is low: an attacker reads another user's AI video-generation metadata (prompts, task IDs, video/cover URLs), not credentials, not system data, and cannot modify or destroy anything. Net: patch in normal cycle; the public POC plus trivial exploitability argue against indefinite deferral, but the low confidentiality impact and authenticated-only precondition keep this below emergency priority. |
| Exploit ScenarioDerived | A low-privileged but authenticated JeecgBoot user calls the getVideoRecords endpoint of VideoGenerationController and substitutes a different userId value to enumerate and read other users' AI video-generation history. A public POC (poc_airag_video_history_read.py, published via VulnCheck) automates this, so exploitation requires only a valid low-privilege account and HTTP access - AV:N/AC:L/PR:L means no special tooling or user interaction is needed. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 10, 2026
JeecgBoot through 3.9.5 contains an authorization bypass (CWE-639) in the AIRAG video-generation module, where an authenticated low-privileged user can read other users' AI video-generation history by supplying an arbitrary userId to the getVideoRecords handler in VideoGenerationController. Publicly available exploit code exists, and the disclosed records include prompts, task IDs, video URLs, and cover URLs; however, there is no write access or broader compromise, and exploitation requires the AIRAG video feature to be deployed and the attacker to already hold a valid account. The issue is a moderate-severity information-disclosure bug (CVSS 4.0 5.3; independent CVSS 3.1 assessment 5.3) rather than a top-tier priority.
RemediationAI
No vendor-released patch is identified in the provided data; monitor the VulnCheck advisory and JeecgBoot repository for a fixed release. Until an official fix is available, enforce a server-side authorization check in VideoGenerationController.getVideoRecords so that the supplied userId must match the authenticated principal (or the caller must have an explicit administrative role). If code changes cannot be made immediately, disable or restrict the AIRAG video-generation history endpoint (for example, via Spring Security URL rules or reverse-proxy ACLs) to only trusted roles that legitimately need access; this may break legitimate video-history views. A WAF rule blocking requests where userId does not match the session user can reduce exposure but is brittle and may generate false positives. Review logs for suspicious userId parameter manipulation, and follow the vendor advisory guidance when it becomes available.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
JeecgBoot is a Java/Spring Boot low-code development platform; the vulnerable component is the jeecg-boot-module-airag, specifically the VideoGenerationController.getVideoRecords handler, which accepts a userId parameter and returns AI video-generation records without verifying that the requesting user owns that userId. This is a classic CWE-639 Authorization Bypass Through User-Controlled Key, also known as an insecure direct object reference (IDOR): the application trusts a client-supplied identifier and performs no ownership or role check. The CPE cpe:2.3:a:jeecgboot:jeecgboot:*:*:*:*:*:*:*:* indicates all JeecgBoot versions up to and including 3.9.5 are in scope, and the vulnerable code is visible at the referenced GitHub source lines L77-L81. The attack surface is remote (AV:N) over the normal authenticated web API; because PR:L is set in the vector, only an authenticated user is required, not administrative privileges.
Know when Jeecgboot gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Network-reachable endpoint (AV:N) with low complexity, but requires an authenticated low-privilege account (PR:L); only limited data disclosure, so C:L and I:A:N.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
DescriptionCVE.org
JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other users' records via the userId parameter. Low-privileged attackers can supply another user id to retrieve their AI video generation history, including prompts, task ids, video URLs and cover URLs.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Unauthenticated report data exfiltration in JimuReport (JeecgBoot) through version 2.5.0 lets remote attackers export th
Broken access control in JeecgBoot through 3.9.2 lets authenticated low-privilege users reach the OpenApiAuthController
Privilege escalation in JeecgBoot through 3.9.5 lets any authenticated user approve their own pending tenant administrat
Missing authorization in the saveDeptRolePermission endpoint of JeecgBoot's SysDepartPermissionController lets any authe
SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictIn
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByC
JeecgBoot through 3.9.5 ships a system log controller whose batch-delete handler performs no authorization check, so any
Database credential disclosure in JeecgBoot through 3.9.5 allows any authenticated low-privileged user to retrieve JDBC
Missing authorization in JeecgBoot through 3.9.5 lets any authenticated user enumerate record IDs through the unguarded
Authenticated low-privileged users of JeecgBoot through 3.9.5 can retrieve any other user's stored password ciphertext t
Authenticated users of any privilege level on JeecgBoot through 3.9.5 can rewrite DingTalk, WeCom, or Feishu third-party
Exploit-DB