CVE-2025-66916 | Dromara RuoYi-Vue-Plus up to 5.5.1 snailjob check-node-expression File path traversal

January 9, 2026 Yanac

A vulnerability classified as critical was found in Dromara RuoYi-Vue-Plus up to 5.5.1. This vulnerability affects the function File of the file /snail-job/workflow/check-node-expression of the component snailjob. The manipulation results in path traversal.

This vulnerability is known as CVE-2025-66916. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More