CVE-2026-108661 | JeecgBoot up to 3.9.5 changeOwenUserTenant userId/tenantId improper authorization

October 11, 2026 Yanac

A vulnerability has been found in JeecgBoot up to 3.9.5 and classified as problematic. This impacts an unknown function of the file /sys/tenant/changeOwenUserTenant. The manipulation of the argument userId/tenantId leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-108661. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More