CVE-2026-108610: JeecgBoot through 3.9.5 Missing Authorization via /airag/word/edit Endpoint
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates. Low-privileged attackers can send PUT or POST requests to /airag/word/edit to overwrite shared templates that other users rely on to generate documents.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated JeecgBoot user, including a low-privileged account, can exploit the affected edit handler. No user interaction is required.
What access does an attacker need?
The attacker needs valid authentication and network access to the JeecgBoot instance. They can send PUT or POST requests to /airag/word/edit.
What is the practical impact?
An attacker can overwrite shared word templates used by other users to generate documents. The reported impact is unauthorized modification of template content; no confidentiality or availability impact is stated.
How can I check whether an instance is affected?
JeecgBoot versions through 3.9.5 are identified as affected. Review whether authenticated low-privileged users can successfully submit PUT or POST requests to /airag/word/edit and modify templates they should not be allowed to edit.