CVE-2026-108670: JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/experiment
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsController that allows any authenticated user to run AI prompt experiments. Low-privileged attackers can supply other users' prompt template and dataset ids to trigger large language model evaluation runs, write result rows into airagextdata, and change dataset status.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any authenticated JeecgBoot user, including a low-privileged account, can exploit it. The attacker does not need interaction from another user.
What access does an attacker need to target another user's resources?
The attacker needs the other user's prompt template and dataset IDs. They can supply those IDs to initiate prompt experiments against resources they do not own.
What is the potential impact of a successful exploit?
An attacker can trigger large language model evaluation runs, create result rows in airag_ext_data, and change dataset status. The available data indicates integrity impact, not confidentiality or availability impact.