CVE-2026-75411: n/a

CVE-2026-75411 describes a remote command execution vulnerability in JeecgBoot v3.9.2. The issue is located in the CodeNode component of the AI Flow module, which supports Groovy script execution. Although the SecurityCheck class attempts to block dangerous calls using a blacklist, the dynamic features of Groovy, such as string concatenation and reflection, enable attackers to circumvent these restrictions and execute arbitrary commands remotely. This vulnerability is classified under CWE-94 (Improper Control of Generation of Code). No official patch or remediation guidance is currently available.

Successful exploitation of this vulnerability allows unauthenticated remote attackers to execute arbitrary commands on the affected system, potentially leading to full system compromise, data loss, or service disruption. The CVSS score of 9.8 reflects the critical severity and the ease of exploitation without any privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting the Groovy script execution feature in the AI Flow module if possible, and monitor for suspicious activity related to script execution. Avoid exposing the affected component to untrusted networks.