Evidence · DiggingBeagle record
JeecgBoot AI-RAG API reads other users Redis chat variables
Primary or indexed evidence for Radar finding DB-RADAR-CP2-CP3-086. Specific chat variables, not automatically all Redis keys or conversation histories.
- Source role
- secondary reporting
Evidence record
Primary or indexed evidence for Radar finding DB-RADAR-CP2-CP3-086. Specific chat variables, not automatically all Redis keys or conversation histories.
Claim-level citations (3)
- supportsJeecgBoot AI-RAG endpoint permits cross-user chat-variable reads: GitHub Advisory GHSA-5w4w-m38r-7r7r describes CVE-2026-108879 in JeecgBoot through 3.9.5: an authenticated user can read another userâs chat variable by controlling the username parameter.
Description, insecure direct object reference vulnerability
- supportsJeecgBoot AI-RAG endpoint permits cross-user chat-variable reads: The documented route is /airag/api/getChatVariable in AiragBaseApiController, scoped to application, username and variable name inputs.
Description, endpoint and parameters
- supportsJeecgBoot AI-RAG endpoint permits cross-user chat-variable reads: The October 11 GitHub Advisory lists no known patched version and describes CVE-2026-108879 as requiring an authenticated user who controls the username parameter in a getChatVariable request.
GHSA-5w4w-m38r-7r7r, Description, Affected versions and Patched versions