CVE-2026-108878: JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI application configuration. Attackers can enumerate application ids via the unguarded /airag/app/listDict endpoint and query each id to obtain system prompts, memory prompts, model ids, knowledge base ids, and plugin bindings of other users' applications.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
Any low-privileged authenticated JeecgBoot user who can reach the Airag application endpoints can exploit it. No user interaction is required.
What information can an attacker obtain?
An attacker can enumerate AI application IDs through the unguarded /airag/app/listDict endpoint and use /airag/app/queryById to retrieve configurations belonging to other users. Exposed data includes system prompts, memory prompts, model IDs, knowledge base IDs, and plugin bindings.
Is exploitation limited to a known application ID?
No. The /airag/app/listDict endpoint permits enumeration of application IDs, allowing an attacker to identify targets before querying their configurations.
How can I determine whether my deployment is affected?
Deployments of JeecgBoot through version 3.9.5 are affected if the Airag application functionality and the specified endpoints are reachable by low-privileged authenticated users. Test whether such a user can list application IDs and retrieve another user's application configuration through /airag/app/queryById.