CVE-2026-110215

🗓️ 13 Oct 2026 18:50:03Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 17 Views🌐 WEB

Missing authorization in youlai-boot allows authenticated users to escalate privileges.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2026-110215	13 Oct 202619:12	–	circl
Cvelist	CVE-2026-110215 youlai-boot through 2.21.1 Missing Authorization in Role Menu Assignment Allows Privilege Escalation	13 Oct 202618:50	–	cvelist
EUVD	EUVD-2026-99256	13 Oct 202618:50	–	euvd
Mend	CVE-2026-110215	13 Oct 202618:50	–	mend
NVD	CVE-2026-110215	13 Oct 202619:18	–	nvd
Positive Technologies	PT-2026-111839	13 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-110215: Missing Authorization	13 Oct 202600:00	–	rapid7

Vulners

CNA

Node

youlai youlai-bootRange≤2.21.1

[
  {
    "vendor": "youlaitech",
    "product": "youlai-boot",
    "packageURL": "pkg:github/youlaitech/youlai-boot",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "0",
        "lessThanOrEqual": "2.21.1",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "repo": "https://github.com/youlaitech/youlai-boot"
  }
]

Source	Link
hackmd	www.hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/youlai-boot-role-menu-assignment-and-user-status-missing-authorization
github	www.github.com/youlaitech/youlai-boot/blob/v2.21.1/src/main/java/com/youlai/boot/system/service/impl/RoleServiceImpl.java
github	www.github.com/youlaitech/youlai-boot/commit/36d2db6dc559817bd4e02b1f33b1998891850497
github	www.github.com/youlaitech/youlai-boot/blob/v2.21.1/src/main/java/com/youlai/boot/system/controller/RoleController.java
vulncheck	www.vulncheck.com/advisories/youlai-boot-through-2.21.1-missing-authorization-in-role-menu-assignment-allows-privilege-escalation

Parameter	Position	Path	Description	CWE
{roleId}	path	/api/v1/roles/{roleId}/menus	Missing authorization allows authenticated users to assign arbitrary menu and button permissions to roles, potentially leading to privilege escalation.	CWE-862

26 Oct 2026 19:16Current

6.1Medium risk

Vulners AI Score6.1

CVSS 48.7

CVSS 3.18.8

EPSS0.00471

CWE-862