A vulnerability, which was classified as critical, was found in JeecgBoot up to 3.9.1. Affected is the function
isExistSqlInjectKeyword of the file /jeecg-boot/sys/api/getDictItems. Such manipulation leads to sql injection.
This vulnerability is listed as CVE-2026-3672. The attack may be performed from remote. In addition, an exploit is available.
