CVE-2026-97320
Deferred Deferred - Pending Action

Server-Side Request Forgery in RuoYi-Vue-Pro AI Knowledge Module

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: VulDB

Description
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-25
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97320
EUVD
EUVD-2026-86344

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a server-side request forgery (SSRF) flaw in the YunaiV/zhijiantianya ruoyi-vue-pro software up to version 2026.08. It exists in the AiKnowledgeDocumentServiceImpl.readUrl function of the AI Knowledge Module, where manipulating the url argument allows an attacker to make unauthorized server-side requests. The exploit is remotely accessible and has been publicly disclosed.

Detection Guidance

This vulnerability involves server-side request forgery (SSRF) in the AiKnowledgeDocumentServiceImpl.readUrl function of the AI Knowledge Module in YunaiV/zhijiantianya ruoyi-vue-pro. Detection may involve inspecting network traffic for unusual outbound requests from the application server, particularly to internal or external systems. Check application logs for suspicious URL parsing or unexpected HTTP requests originating from the server.

Impact Analysis

An attacker could exploit this SSRF flaw to access internal resources, bypass firewalls, or interact with other systems on behalf of the vulnerable server. This may lead to unauthorized data retrieval, internal network scanning, or further attacks against connected systems. The impact depends on the server's network configuration and permissions.

Compliance Impact

This SSRF vulnerability could lead to unauthorized data exposure or access, which may violate GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations using affected software may face compliance violations if the flaw results in data breaches or unauthorized access to sensitive data.

Mitigation Strategies

Immediately update the ruoyi-vue-pro software to the latest version to address the SSRF vulnerability in the AI Knowledge Module. If no update is available, disable the affected AiKnowledgeDocumentServiceImpl component or restrict network access to the vulnerable URL handling functionality.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97320. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart