Description
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ageerle | ruoyi-ai | 3.0.0 – ≤ 3.1.0 | — |
References
- RuoYi AI exposes private workflow definitions and permits cross user soft deletion technical-description exploit
- WorkflowService.search() at v3.1.0 technical-description
- WorkflowController /workflow/search at v3.1.0 technical-description
- https://github.com/ageerle/ruoyi-ai product
- VulnCheck Advisory: ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via /workflow/search third-party-advisory