TI-2025-02801 CVE-2025-3202 · GHSA-vf4w-gg7r-x8mw
ageerle ruoyi-ai SysNoticeController.java improper authorization
Priority HIGH 70
A vulnerability classified as critical has been found in ageerle ruoyi-ai up to 2.0.0.
ageerle
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
ageerle records in CISA KEVNo ageerle vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2025-02798 CVE-2025-3199 · GHSA-w9j2-68r5-mpp4
ageerle ruoyi-ai API Interface SysModelController.java improper authorization
Priority HIGH 70
A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical.
TI-2026-70089 CVE-2026-108112 · GHSA-h7qx-c58p-3mff
ruoyi-ai Missing Authorization via Workflow Delete Endpoint
Priority MEDIUM 57
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST /workflow/del/{uuid}.
TI-2026-70088 CVE-2026-108111 · GHSA-rxv9-x3r4-pp2r
Missing authorization in ruoyi-ai exposes private workflows
Priority MEDIUM 57
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows.
TI-2025-05867 CVE-2025-6466 · GHSA-c5rx-x9g6-843g
ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload
Priority MEDIUM 57
A vulnerability was found in ageerle ruoyi-ai 2.0.0 and classified as critical.