CVE-2026-2111

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.0

Description A path traversal weakness exists in JeecgBoot. This issue affects some unknown functionality of the file /airag/knowledge/doc/edit within the Retrieval-Augmented Generation Module. Manipulation of the filePath argument can lead to path traversal, and the attack can be executed remotely. The exploit has been publicly released. The vendor was contacted but did not respond.

Recommendations Update JeecgBoot to a version later than 3.9.0.