CVE-2026-108668 jeecgboot CVE debrief

Who should care

Defenders and administrators of systems using JeecgBoot, especially those with low-privileged user access to the affected functionality, should assess exposure and prioritize remediation.

Why it matters

CVE-2026-108668 is a missing authorization vulnerability in JeecgBoot through 3.9.5 that allows authenticated users to delete AI prompt templates. Defenders should verify and remediate this vulnerability, especially in systems accessible to low-privileged users. The corpus does not establish versions beyond 3.9.5, exploitation, impact, or remediation, which require verification from official sources.

• Verification of access controls for AI prompt templates is required to prevent unauthorized deletion.
• Low-privileged users can exploit this vulnerability to purge templates belonging to administrators or other users.
• Remediation priority is high for systems where low-privileged users have access to the affected functionality.
• Further verification is needed to determine the full scope of affected versions and potential impact.

Technical summary

The vulnerability exists in the AiragPromptsController deleteRecycleBin handler of JeecgBoot through 3.9.5. This handler lacks proper authorization, allowing any authenticated user to send DELETE requests with prompt template ids. Successful exploitation could result in the permanent removal of recycle-bin templates belonging to administrators or other users. Defenders should prioritize verifying and remediating this vulnerability, especially in systems where low-privileged users have access to the affected functionality. The CVE record and NVD entry provide details about the vulnerability. However, the corpus does not establish versions beyond 3.9.5, exploitation, impact, or remediation, which require verified

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability, especially in systems where low-privileged users have access to the affected functionality.

Recommended defensive actions

• Verify the version of JeecgBoot in use and check if it is vulnerable (3.9.5 or earlier).
• Restrict access to the AiragPromptsController deleteRecycleBin handler to authorized users only.
• Implement additional monitoring to detect and respond to potential exploitation attempts.
• Review and update access controls for AI prompt templates to prevent unauthorized deletion.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

The CVE record and NVD entry provide details about the vulnerability. However, the corpus does not establish versions beyond 3.9.5, exploitation, impact, or remediation, which require verification from the supplied official sources.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.