JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read… (CVE-2026-108879)

An insecure direct object reference vulnerability exists in JeecgBoot through version 3.9.5 within the AiragBaseApiController. Authenticated users can exploit this by sending crafted POST requests to the /airag/api/getChatVariable endpoint, specifying a target appId, username, and variable name. This allows unauthorized reading of other users' AI chat variables stored in Redis. The vulnerability is tracked as CVE-2026-108879 and has a CVSS 3.1 base score of 4.3, reflecting a network attack vector with low complexity and requiring authentication privileges.

The vulnerability allows authenticated users to access AI chat variables of other users, leading to limited confidentiality exposure of stored chat memory data. There is no impact on data integrity or system availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected API endpoint to trusted users only and monitor for suspicious access patterns involving the /airag/api/getChatVariable endpoint. Avoid sharing sensitive information in AI chat variables that could be exposed.