A vulnerability categorized as critical has been discovered in y_project RuoYi 4.8.0. The affected element is the function
authRole of the file SysUserController.java. Such manipulation leads to improper access controls.
This vulnerability is traded as CVE-2025-46175. The attack may be launched remotely. There is no exploit available.