CVE-2026-19000

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.3

Description A server-side request forgery (SSRF) issue exists in the Anonymous Chat Attachment Parser component. A remote attacker can exploit this by manipulating an unknown function within the '/airag/chat/send' endpoint, allowing the server to make unauthorized requests to internal or external resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/airag/chat/send' endpoint to minimize the risk of exploitation.