CVE-2026-108657 | JeecgBoot up to 3.9.5 Tenant Approval poc_tenant_ownership_and_pack_approval.py SysTenantController.passApply improper authorization

October 11, 2026 Yanac

A vulnerability classified as critical has been found in JeecgBoot up to 3.9.5. Impacted is the function SysTenantController.passApply of the file poc_tenant_ownership_and_pack_approval.py of the component Tenant Approval Handler. This manipulation causes improper authorization.

This vulnerability appears as CVE-2026-108657. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More