CVE-2026-108611: JeecgBoot Authorization Bypass Vulnerability

CVE-2026-108611 Overview

CVE-2026-108611 is a missing authorization vulnerability [CWE-862] affecting JeecgBoot through version 3.9.5. The flaw resides in the AigcWordTemplateController delete handler, which fails to verify ownership or role before processing deletion requests. Any authenticated user, regardless of privilege level, can issue a DELETE request to /airag/word/delete with an id parameter and permanently remove any word template from the shared library. The vulnerability affects the Retrieval-Augmented Generation (RAG) word template feature introduced in the jeecg-boot-module-airag module.

Critical Impact
Low-privileged authenticated users can delete arbitrary word templates from the shared library, causing integrity and availability loss across all tenants sharing the template store.

Affected Products

JeecgBoot through version 3.9.5
jeecg-boot-module-airag module
AigcWordTemplateController delete endpoint (/airag/word/delete)

Discovery Timeline

2026-10-10 - CVE-2026-108611 published to NVD
2026-10-15 - Last updated in NVD database

Technical Details for CVE-2026-108611

Vulnerability Analysis

The vulnerability exists in the AigcWordTemplateController class within the jeecg-boot-module-airag module. The delete handler mapped to /airag/word/delete accepts an id parameter identifying the target word template record. The controller invokes the deletion service directly without checking whether the authenticated principal owns the template or holds an administrative role.

Because JeecgBoot's authentication layer still enforces login, the endpoint rejects anonymous requests. However, once a user obtains any valid session token, the authorization gap allows them to target records belonging to other users. Deletion is destructive and non-recoverable through the API, which affects both integrity and availability of the shared template library.

The EPSS probability sits at 0.269%, reflecting a straightforward exploitation path once an attacker holds low-privileged credentials on an exposed JeecgBoot deployment.

Root Cause

The root cause is a missing authorization check [CWE-862] in the controller method. The handler relies on URL-based routing and session authentication but omits per-object access control. No service-layer guard verifies that the current user created the template or has the role required to delete entries in the shared library.

Attack Vector

An authenticated attacker enumerates or guesses template id values and issues a DELETE request to /airag/word/delete?id={target}. The server processes the deletion and returns success. Public proof-of-concept code is available in a GitHub repository referenced in the VulnCheck Advisory for JeecgBoot and the GitHub PoC for JeecgBoot.

See the vulnerable handler at GitHub JeecgBoot Controller Code for the missing authorization check in the delete method.

Detection Methods for CVE-2026-108611

Indicators of Compromise

Unexpected DELETE requests to /airag/word/delete in web server or reverse proxy access logs.
Audit log entries showing template deletions performed by user accounts that did not create the record.
Sudden drop in the row count of the word template database table without a corresponding administrative action.

Detection Strategies

Create web application firewall (WAF) rules that flag DELETE requests to /airag/word/delete originating from non-administrative roles.
Correlate authentication logs with API audit trails to surface users deleting templates they did not author.
Enable database-level triggers or audit logging on the word template table to record the acting principal for every delete operation.

Monitoring Recommendations

Alert on bursts of sequential id values in delete requests, which indicate enumeration or scripted abuse.
Monitor low-privileged service accounts for API calls to administrative endpoints under /airag/.
Review session tokens issued to self-registered or guest users for activity against mutation endpoints.

How to Mitigate CVE-2026-108611

Immediate Actions Required

Restrict network access to the JeecgBoot administrative API using an upstream reverse proxy or allowlist.
Disable self-registration on exposed JeecgBoot instances until a patched release is deployed.
Add a server-side authorization filter in front of /airag/word/delete that enforces role or ownership checks.

Patch Information

No vendor patch is listed in the NVD record at publication time. Monitor the JeecgBoot repository and the VulnCheck Advisory for JeecgBoot for a fixed release beyond version 3.9.5.

Workarounds

Apply a reverse-proxy rule that blocks DELETE requests to /airag/word/delete from non-administrative users.
Deploy a Spring interceptor or filter that verifies the caller's role before the request reaches AigcWordTemplateController.
Enforce database-level backups and soft-delete semantics so accidental or malicious deletions can be reversed.

bash

# Example NGINX rule restricting the vulnerable endpoint to internal admin network
location = /airag/word/delete {
    allow 10.0.0.0/24;   # admin network
    deny all;
    proxy_pass http://jeecgboot_backend;
}