CVE-2026-108878

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the AiragAppController queryById handler. This vulnerability allows low-privileged authenticated users to access the configurations of other users' AI applications. Specifically, attackers can enumerate application...