JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged… (CVE-2026-108878)

CVE-2026-108878 describes a missing authorization vulnerability in JeecgBoot through version 3.9.5 within the AiragAppController's queryById handler. Low-privileged authenticated users can exploit this flaw by enumerating application IDs through the unguarded /airag/app/listDict endpoint and querying each ID to access AI application configuration data of other users. The exposed data includes system prompts, memory prompts, model identifiers, knowledge base identifiers, and plugin bindings. This vulnerability does not affect system integrity or availability but compromises confidentiality of AI application configurations.

The vulnerability allows unauthorized disclosure of AI application configuration data to low-privileged authenticated users. Confidential information such as system and memory prompts, model IDs, knowledge base IDs, and plugin bindings can be accessed without proper authorization. There is no indication of impact on system integrity or availability. The confidentiality breach could aid attackers in further reconnaissance or targeted attacks against AI applications.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the /airag/app/listDict endpoint and the AiragAppController queryById handler to trusted users only. Monitor for unusual access patterns to these endpoints and consider implementing additional authorization checks to prevent unauthorized data access.