CVE-2026-108111: ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or ispublic filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated non-admin user in an affected tenant can query the endpoint. The exposure is limited to enabled private workflows belonging to other users in that same tenant.
What information can be exposed?
The endpoint can list other users' private workflows, including their UUIDs and complete node and edge configurations. The issue affects confidentiality only; no integrity or availability impact is stated.
Are default deployments affected?
The provided information does not identify a configuration prerequisite beyond having affected ruoyi-ai versions, authenticated non-admin users, and enabled private workflows in a tenant.
How can I determine whether my deployment is affected?
Check whether ruoyi-ai is running version 3.0.0 through 3.1.0. In an affected version, an authenticated non-admin account can request GET /workflow/search and see enabled private workflows owned by other users in its tenant.