Vulnerabilities

TI-2025-41049 CVE-2025-66736 · GHSA-8vpj-fwmm-xmcm

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control.

LOW 31

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00319 Published 2025-12-22 No fix listed CWE-284

TI-2025-41048 CVE-2025-66735 · GHSA-vfjq-wcxg-p5r3

LOW 39

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2025-12-22 No fix listed CWE-284

TI-2025-35016 CVE-2025-55471 · GHSA-p43m-vh82-h4mp

HIGH 72

Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2025-11-26 No fix listed CWE-284

TI-2025-35015 CVE-2025-55469 · GHSA-h67h-6hv5-vfg2

HIGH 82

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00454 Published 2025-11-26 No fix listed CWE-284