A vulnerability described as critical has been identified in renren-secuity up to 5.4.x. Affected is an unknown function of the file BaseServiceImpl.java. Executing a manipulation can lead to sql injection.

This vulnerability is handled as CVE-2025-70821. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.