CVE-2026-88616 | Dromara RuoYi-Vue-Plus 6.0.0 FlwTaskController FlwTaskController.java FlwTaskServiceImpl.completeTask privilege escalation

September 15, 2026 Yanac

A vulnerability was found in Dromara RuoYi-Vue-Plus 6.0.0. It has been declared as critical. This vulnerability affects the function FlwTaskServiceImpl.completeTask of the file FlwTaskController.java of the component FlwTaskController. Executing a manipulation can lead to privilege escalation.

This vulnerability is tracked as CVE-2026-88616. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More