Evidence · DiggingBeagle record
JeecgBoot AI-RAG queryById leaks other users system prompts and plugin bindings
Primary or indexed evidence for Radar finding DB-RADAR-CP2-CP3-087. Config disclosure not proof underlying knowledge documents/credentials readable.
- Source role
- secondary reporting
Evidence record
Primary or indexed evidence for Radar finding DB-RADAR-CP2-CP3-087. Config disclosure not proof underlying knowledge documents/credentials readable.
Claim-level citations (3)
- supportsJeecgBoot AI application configuration was readable across users: GitHub Advisory GHSA-mf5r-54hh-g48q documents CVE-2026-108878 affecting JeecgBoot through 3.9.5, with cross-user access to AI application settings via queryById.
Description, missing authorization in AiragAppController
- supportsJeecgBoot AI application configuration was readable across users: According to the advisory, application IDs can be enumerated through /airag/app/listDict and used to retrieve prompts, model IDs, knowledge-base IDs and plugin bindings.
Description, listDict enumeration and disclosed fields
- supportsJeecgBoot AI application configuration was readable across users: The October 11 GitHub Advisory describes an authenticated enumeration chain: /airag/app/listDict exposes candidate IDs and queryById returns another user's AI application configuration.
GHSA-mf5r-54hh-g48q, Description