A vulnerability, which was classified as critical, was found in JeecgBoot 3.9.0/3.9.1. The impacted element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/airag/JeecgBizToolsProvider.java of the component AI Chat Module. Such manipulation leads to missing authentication.
This vulnerability is documented as CVE-2026-5616. The attack can be executed remotely. There is not any exploit available.
It is best practice to apply a patch to resolve this issue.
The project fixed the issue with a commit which shall be part of the next official release.
