CVE-2026-108879 | JeecgBoot up to 3.9.5 AI Chat Variable Retrieval poc_caller_identity_subjects.py AiragBaseApiController username resource injection

SecurityVulns
Yanac

A vulnerability classified as problematic has been found in JeecgBoot up to 3.9.5. The impacted element is the function AiragBaseApiController of the file poc_caller_identity_subjects.py of the component AI Chat Variable Retrieval. Performing a manipulation of the argument Username results in improper control of resource identifiers.

This vulnerability is cataloged as CVE-2026-108879. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More