CVE-2026-108878
Received Received - Intake

Missing Authorization in JeecgBoot Allows Unauthorized AI App Data Access

Publication date: 2026-10-11

Last updated on: 2026-10-11

Assigner: VulnCheck

Description
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDict endpoint and query each id to obtain system prompts, memory prompts, model ids, knowledge base ids, and plugin bindings of other users' applications.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-11
Last Modified
2026-10-11
Generated
2026-10-11
AI Q&A
2026-10-11
EPSS Evaluated
N/A
NVD
CVE-2026-108878
EUVD
EUVD-2026-97052

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jeecgboot JeecgBoot 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-108878 is a missing authorization vulnerability in JeecgBoot through version 3.9.5. It allows low-privileged authenticated users to read any AI application configuration by exploiting unprotected endpoints. Attackers can enumerate application IDs via /airag/app/listDict and query each ID to access sensitive details like system prompts, model IDs, knowledge base IDs, and plugin bindings belonging to other users.

Detection Guidance

To detect this vulnerability, check if the /airag/app/listDict endpoint is accessible without authentication and if it exposes application IDs. Then query /airag/app/queryById with those IDs to see if sensitive data like system prompts or model IDs is returned without proper authorization.

Impact Analysis

This vulnerability allows unauthorized users to access sensitive AI application configurations, including system prompts, model settings, and plugin bindings. Attackers could steal proprietary AI models, knowledge bases, or credentials like shareToken used for anonymous chat access. It may lead to data breaches, intellectual property theft, or unauthorized access to other users' AI applications.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and privacy, such as GDPR and HIPAA, by enabling unauthorized access to sensitive data. GDPR requires strict access controls and data protection measures, while HIPAA mandates safeguards for protected health information. The exposure of AI configurations and credentials could result in regulatory penalties and reputational damage.

Mitigation Strategies

Immediately update JeecgBoot to a version that includes the fix for tenant isolation in AiragAppController. Ensure the /airag/app/listDict and /airag/app/queryById endpoints enforce proper authorization checks to prevent unauthorized access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108878. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart