Executive brief
JeecgBoot, a low-code development platform, contains a security vulnerability in its AI-related debugging features. An authenticated user can force the server to make unauthorized requests to internal network resources or cloud metadata services. This could allow an attacker to access sensitive internal information or credentials that are not intended to be public, potentially leading to further compromise of the cloud environment.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in JeecgBoot versions up to 3.9.1 within the /airag/app/debug endpoint. The vulnerability is located in the FileDownloadUtils.download2DiskFromNet function, which is called via AiragChatServiceImpl. An authenticated attacker can provide a malicious URL in the 'files' JSON parameter of a POST request. The application fails to validate the host or IP address of the provided URL before initiating an outbound HTTP request using HttpURLConnection. Attackers can bypass extension whitelists by appending a permitted extension (e.g., .pdf) to the URL path, enabling them to target internal services or cloud instance metadata endpoints (169.254.169.254). This issue is fixed in version 3.9.2.
Affected products
- JeecgBoot JeecgBoot <= 3.9.1
Timeline
- 2026-05-07: disclosed: Issue reported on GitHub
- 2026-05-11: patched: Version 3.9.2 released
- 2026-06-01: advisory: CVE published and NVD record created