CVE-2026-38812

CVE-2026-38812 affects RuoYi v4.8.2; the code-generation tool (endpoint /tool/gen/createTable) is vulnerable to SQL Injection. An authenticated administrator could potentially access sensitive database information. An exploit exists in a public GitHub repository illustrating the issue. No patch/v...