CVE-2026-9373: JeecgBoot OpenAPI Endpoint call improper authentication
A vulnerability has been found in JeecgBoot 3.9.1. This issue affects some unknown processing of the file /openapi/call/ of the component OpenAPI Endpoint. Such manipulation leads to improper authentication. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
JeecgBoot 3.9.1from your environment.Uninstall or stop running the affected JeecgBoot 3.9.1 instance or remove the OpenAPI endpoint component if the application is not required or cannot be safely updated.
- Configuration
Disable or remove the /openapi/call/ OpenAPI endpoint in JeecgBoot configuration or routing to prevent remote invocation of the vulnerable endpoint.
JeecgBoot OpenAPI Endpoint /openapi/call endpoint = disabled - Compensating control
Block or restrict access to the /openapi/call/ path at the network edge (WAF, reverse proxy, or firewall). Allow only trusted management IPs if the endpoint must remain reachable.
- Operational
Audit access logs for any requests to /openapi/call/ for signs of exploitation and rotate any credentials or tokens that may have been exposed if suspicious activity is observed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9373?
CVE-2026-9373 has a severity score of low, rated at 3.7.
How do I fix CVE-2026-9373?
To mitigate CVE-2026-9373, ensure proper authentication measures are implemented and keep your JeecgBoot version updated.
What component is affected by CVE-2026-9373?
CVE-2026-9373 affects the OpenAPI Endpoint of the JeecgBoot application.
Can CVE-2026-9373 be exploited remotely?
Yes, CVE-2026-9373 can be exploited remotely due to improper authentication.
What is the complexity level of exploiting CVE-2026-9373?
Exploiting CVE-2026-9373 has a high complexity level, making it challenging to carry out.