PT-2026-6919 · Unknown · Jeecg-Boot

Saul1213 · Publicado 2026-02-07 · Atualizado 2026-03-03 · CVE-2026-2111

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.0

Description A path traversal weakness exists in JeecgBoot. This issue affects some unknown functionality of the file /airag/knowledge/doc/edit within the Retrieval-Augmented Generation Module. Manipulation of the filePath argument can lead to path traversal, and the attack can be executed remotely. The exploit has been publicly released. The vendor was contacted but did not respond.

Recommendations Update JeecgBoot to a version later than 3.9.0.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-2111

Produtos afetados

Jeecg-Boot

Referências · 10

• 🔥 https://yuque.com/la12138/vxbwk9/ezodz20a26g36y8m · Exploit
• https://t.me/cveNotify/153859 · Publicação no Telegram
• https://t.me/CVEtracker/44050 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-2111 · Aviso do Fabricante
• https://vuldb.com/?submit.746789 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2111 · Nota de Segurança
• https://vuldb.com/?id.344687 · Nota
• https://t.me/cveNotify/151263 · Publicação no Telegram
• https://vuldb.com/?ctiid.344687 · Nota
• https://twitter.com/CVEnew/status/2020246664464720365 · Publicação no Twitter