CVE-2026-10240

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.3

Description A server-side request forgery (SSRF) issue exists in an unknown function within the file /airag/airagModel/test. This occurs when the baseUrl argument is manipulated, allowing a remote attacker to induce the server to make unintended requests.

Recommendations Update to a version newer than 3.9.2. As a temporary workaround, restrict access to the file /airag/airagModel/test to minimize the risk of exploitation.