CVE-2026-108670 | JeecgBoot up to 3.9.5 AiragPromptsController promptExperiment prompt_template/dataset_id improper authorization

SecurityVulns

A vulnerability described as problematic has been identified in JeecgBoot up to 3.9.5. The impacted element is the function promptExperiment of the component AiragPromptsController. Such manipulation of the argument prompt_template/dataset_id leads to improper authorization.

This vulnerability is documented as CVE-2026-108670. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More