CVE-2026-108670

JeecgBoot versions up to and including 3.9.5 are vulnerable to a missing authorization flaw in the promptExperiment handler of the AiragPromptsController . This vulnerability allows any authenticated user to perform unauthorized actions by providing different prompt template and dataset IDs. Cons...