2.3
Faible
CVE-2026-2555 A weakness has been identified in JeecgBoot 3.9.1
Description
A weakness has been identified in JeecgBoot 3.9.1. This vulnerability affects the function importDocumentFromZip of the file org/jeecg/modules/airag/llm/controller/AiragKnowledgeController.java of the component Retrieval-Augmented Generation. Executing a manipulation can lead to deserialization. The attack can be launched remotely. Attacks of this nature are highly complex. It is stated that the exploitability is difficult. The project was informed of the problem early through an issue report but has not responded yet.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| JeecgBoot | 3.9.1 | Pas de correctif indiqué |
Références
- VDB-346163 | JeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization vuldb.com
- VDB-346163 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #750232 | jeecgboot JeecgBoot 3.9.1 Remote Command Execution vuldb.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de JeecgBoot
Les 47 CVE de JeecgBoot →
CVE-2026-86228
A security vulnerability has been detected in JeecgBoot up to 3.9.3
5.3
Moyenne
CVE-2026-19000
A vulnerability was identified in JeecgBoot up to 3.9.2
6.9
Moyenne
CVE-2026-11502
A weakness has been identified in JeecgBoot up to 3.9.2
2.3
Faible
CVE-2026-11464
A vulnerability was identified in JeecgBoot up to 3.9.2
2.3
Faible