CVE-2026-108669

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization issue (CWE-862) within the AiragKnowledgeController . Specifically, the embeddingSearch handler lacks the necessary Shiro permission annotations . This allows low-privileged authenticated attackers to access the GET /airag...