CVE-2026-7710: YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication
A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component Ruoyi-Vue-Pro. Performing a manipulation of the argument mock-token results in improper authentication. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7710?
CVE-2026-7710 is classified as a high severity vulnerability due to improper authentication in the JwtAuthenticationTokenFilter.java file.
How do I fix CVE-2026-7710?
To fix CVE-2026-7710, update your YunaiV yudao-cloud software to a version later than 3.8.0.
What component is affected by CVE-2026-7710?
CVE-2026-7710 affects the JwtAuthenticationTokenFilter.java component in the Ruoyi-Vue-Pro framework.
What versions of YunaiV yudao-cloud are vulnerable to CVE-2026-7710?
YunaiV yudao-cloud versions up to and including 3.8.0 are vulnerable to CVE-2026-7710.
What type of authentication issue does CVE-2026-7710 involve?
CVE-2026-7710 involves improper authentication in the doFilterInternal function.