CVE Catalog
CVE-2026-67926
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module.
Risk Assessment
A remote attacker can execute arbitrary code on the server, potentially leading to full compromise of the application and data.
Recommendation
Update JeecgBoot to the latest version and restrict access to the AI Chat module.
Original NVD description (English source)
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module