A vulnerability identified as critical has been detected in YunaiV yudao-cloud up to 2026.01. This impacts the function
getAccessToken of the file yudao-module-system-biz/src/main/java/io/github/ruoyi/common/oauth2/service/impl/OAuth2TokenServiceImpl.java. Performing a manipulation results in improper authentication.
This vulnerability is identified as CVE-2026-7679. The attack can be initiated remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
