A vulnerability categorized as critical has been discovered in y_project RuoYi 4.8.0. The affected element is the function authRole of the file SysUserController.java. Such manipulation leads to improper access controls.

This vulnerability is traded as CVE-2025-46175. The attack may be launched remotely. There is no exploit available.