CVE-2026-7710 | YunaiV yudao-cloud up to 3.8.0 Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal mock-token improper authentication

A vulnerability was found in YunaiV yudao-cloud up to 3.8.0. It has been rated as critical. This affects the function doFilterInternal of the file JwtAuthenticationTokenFilter.java of the component Ruoyi-Vue-Pro. Performing a manipulation of the argument mock-token results in improper authentication.

This vulnerability is known as CVE-2026-7710. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.