Description
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their scope.
Critical · 9.1
CVE-2025-70985
EUVD-2026-4236GHSA-fwg4-qwcv-hw45
Incorrect access control in the update function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily modify data outside of their s…
Published Jan 23, 2026 · Updated Jan 23, 2026 · Assigned by mitre