CVE-2026-108803

A security vulnerability exists in y_project RuoYi versions up to 4.8.3 . The flaw specifically impacts the changeStatus function within the /system/config/add file of the Disable API component. This vulnerability, categorized under CWE-613 (Insufficient Session Expiration) , allows an attacker t...