CVE-2026-108664: JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/queryById
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler that allows low-privileged authenticated users to read any AI prompt template. Attackers can enumerate ids via the unguarded /airag/prompts/list endpoint and query each one to obtain prompt text, model parameters, and creator details belonging to administrators or other users.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated user with low privileges can exploit it. The issue allows that user to read AI prompt templates belonging to administrators or other users.
What does an attacker need to do to retrieve another user's prompt template?
The attacker can enumerate prompt IDs through the unguarded /airag/prompts/list endpoint, then submit those IDs to /airag/prompts/queryById. Retrieved data can include prompt text, model parameters, and creator details.
Is authentication required?
Yes. The stated attack vector requires a low-privileged authenticated user; the provided information does not indicate that unauthenticated attackers can exploit it.