gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequences in the pluginName parameter. Attackers can send a crafted POST request to /autoCode/removePlugin with '../' sequences, causing os.RemoveAll to delete any directory writable by the server process.
gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the code-generation feature and MCP management interface can exploit this vulnerability by injecting attacker-controlled Go source code through POST /autoCode/addFunc, and then invoking POST /autoCode/mcpStart to trigger a rebuild and restart of the standalone MCP service. This allows arbitrary operating system commands to be executed on the server with the privileges of the application process. Successful exploitation may lead to remote code execution (RCE), modification of backend source code or runtime logic, deployment of persistent backdoors, access to or manipulation of application data and configuration, and further impact on local resources running under the same service account or privilege context. The risk is highest in deployments that retain the source tree, allow writes to source files, and support local build or startup of standalone MCP components. In environments using binary-only releases, read-only filesystems, or with local build capabilities removed, the exploitability of the full attack chain is significantly reduced. However, once the online code-generation capability and MCP-hosted startup workflow are enabled, the overall security impact may reach high to critical severity. As of time of publication, it is unknown if a patched version is available. As a workaround, enforce strict allowlist validation on path- and identifier-related fields such as `humpPackageName`, `packageName`, `FuncName`, and `Router`, and only permit safe identifier formats.
CVE-2026-22786 is a high-severity vulnerability in gin-vue-admin versions up to 2.8.7 that allows an attacker with file upload privileges to perform unrestricted file uploads via a path traversal flaw. The vulnerability exists in the breakpoint resume upload functionality where the filename parameter is concatenated directly with a base directory path without validation, enabling directory traversal attacks. Exploitation can lead to arbitrary file writes anywhere on the server filesystem, potentially resulting in code execution, data compromise, or service disruption. No user interaction or authentication bypass is required beyond having upload privileges. Although no known exploits are reported in the wild yet, the vulnerability's characteristics make it a significant risk for organizations using this software. European organizations relying on gin-vue-admin for backend management should prioritize patching or mitigating this issue to prevent potential attacks. Countries with higher adoption of gin-vue-admin or critical infrastructure using it are at greater risk. Immediate mitigation includes restricting file upload permissions, validating and sanitizing file paths, and monitoring for suspicious file activity.
Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage or unavailability of server resources. Attackers can control the 'FileMd5' parameter to delete any file and folder.