CVE-2026-71807 | RuoYi-Cloud-Plus up to 2.6.2 ruoyi-workflow module FlwTaskController taskId privileges management

September 9, 2026 Yanac

A vulnerability classified as critical has been found in RuoYi-Cloud-Plus up to 2.6.2. Affected by this issue is some unknown functionality of the file FlwTaskController of the component ruoyi-workflow module. The manipulation of the argument taskId leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-71807. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More