Skip to content
OpenAdvisories

Vendor

ageerle

5 known vulnerabilities.

Products

ruoyi-ai 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-108112

    ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint

    ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST /workflow/del/{uuid}. Attackers can obtain workflow UUIDs from GET /workflow/search and supply them because s…

    ageerle ruoyi-ai
  • Medium 4.3
    CVE-2026-108111

    ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search

    ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to l…

    ageerle ruoyi-ai
  • Medium 6.3
    CVE-2025-6466

    ageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload

    A vulnerability was found in ageerle ruoyi-ai 2.0.0 and classified as critical. Affected by this issue is the function speechToTextTranscriptionsV2/upload of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/service/impl/SseServiceImpl.java. …

    ageerle ruoyi-ai