Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: ageerle Clear all filters
TI-2026-70089 CVE-2026-108112 · GHSA-h7qx-c58p-3mff

ruoyi-ai Missing Authorization via Workflow Delete Endpoint

Priority MEDIUM 57

ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST /workflow/del/{uuid}.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00219 Published 2026-10-09 No fix listed CWE-862
TI-2026-70088 CVE-2026-108111 · GHSA-rxv9-x3r4-pp2r

Missing authorization in ruoyi-ai exposes private workflows

Priority MEDIUM 57

ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00199 Published 2026-10-09 No fix listed CWE-862