EUVD-2026-96604

JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that allows any authenticated user to modify AI prompt templates. Low-privileged attackers can send PUT or POST requests to /airag/prompts/edit with a template id to overwrite prompt...

CVE-2026-108665

JeecgBoot versions through 3.9.5 are vulnerable to a missing authorization flaw in the AiragPromptsController edit handler. This vulnerability allows any authenticated user to perform PUT or POST requests to the /airag/prompts/edit endpoint. By providing a specific template ID, a low-privileged a...