CVE-2026-110610

The ruoyi-vue-pro framework (versions through 2026.09 ) contains a Server-Side Request Forgery (SSRF) vulnerability within the yudao-module-ai image service. Specifically, the midjourney imagine endpoint fails to properly validate the referImageUrl parameter. This allows authenticated users to fo...