PT-2026-6919 · Unknown · Jeecg-Boot

Saul1213 · CVE-2026-2111 · Published 2026-02-07 · Updated 2026-03-03

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.0

Description A path traversal weakness exists in JeecgBoot. This issue affects some unknown functionality of the file /airag/knowledge/doc/edit within the Retrieval-Augmented Generation Module. Manipulation of the filePath argument can lead to path traversal, and the attack can be executed remotely. The exploit has been publicly released. The vendor was contacted but did not respond.

Recommendations Update JeecgBoot to a version later than 3.9.0.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-2111

Affected Products

Jeecg-Boot

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2111.json · Exploit
• 🔥 https://yuque.com/la12138/vxbwk9/ezodz20a26g36y8m · Exploit
• https://osv.dev/vulnerability/CVE-2026-2111 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2111 · Security Note
• https://t.me/cveNotify/153859 · Telegram Post
• https://vuldb.com/?ctiid.344687 · Note
• https://t.me/cveNotify/151263 · Telegram Post
• https://twitter.com/CVEnew/status/2020246664464720365 · Twitter Post
• https://t.me/CVEtracker/44050 · Telegram Post
• https://vuldb.com/?id.344687 · Note
• https://vuldb.com/?submit.746789 · Note