# CVE-2026-108879: JeecgBoot insecure direct object reference in AiragBaseApiController

Source: https://junglewise.ai/threats/cve-2026-108879-jeecgboot-through-3-9-5-contains-an-insecure-direct-object  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-11. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-108879 · Severity: medium · CVSS 4.3 · Published 2026-10-11

JeecgBoot is a low-code application development framework used to build enterprise business applications. An authentication bypass vulnerability in its AI chat module allows logged-in users to read other users' stored chat memory by manipulating a username parameter, potentially exposing sensitive conversation data and AI-generated content across the organization.

Technologies: [JeecgBoot](https://junglewise.ai/threats/technologies/jeecgboot). Vendors: [JeecgBoot](https://junglewise.ai/threats/vendors/jeecgboot).

## Quick answers

**Is CVE-2026-108879 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-108879 being exploited in the wild.

**How severe is CVE-2026-108879?** Medium severity, with a CVSS score of 4.3, published 11 October 2026.

**Which products and versions are affected?** JeecgBoot through 3.9.5.

**Is there a fix for CVE-2026-108879?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-108879 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-108879?** Check whether you run JeecgBoot at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The getChatVariable endpoint in AiragBaseApiController accepts user-supplied username, appId, and variable name parameters without validating that the authenticated user is authorized to access those specific chat variables. An attacker with valid credentials can POST to /airag/api/getChatVariable with a target username to retrieve chat memory values stored in Redis belonging to other users, bypassing access controls.

## Affected products

- JeecgBoot JeecgBoot through 3.9.5

## Timeline

- 2026-10-11: disclosed

## References

- [https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/JeecgBoot/poc_caller_identity_subjects.py](https://github.com/AnkesKasty/cve-request-poc/blob/a7b6d1423555812d8efa26c91c5d0683164b31e5/JeecgBoot/poc_caller_identity_subjects.py)
- [https://github.com/jeecgboot/JeecgBoot/blob/e3b9dc0aefe1943d9772b026f64ed671a7c82802/jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragBaseApiController.java](https://github.com/jeecgboot/JeecgBoot/blob/e3b9dc0aefe1943d9772b026f64ed671a7c82802/jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragBaseApiController.java)

## Related threats

- [JeecgBoot SQL injection in Table Dictionary API](https://junglewise.ai/threats/cve-2026-124555-a-weakness-has-been-identified-in-jeecgboot-3-9-5-this)
- [JeecgBoot SQL injection in JimuBI drag chart endpoint](https://junglewise.ai/threats/cve-2026-124554-a-security-flaw-has-been-discovered-in-jeecgboot-3-9-5-this)
- [JeecgBoot SQL injection in SqlInjectionUtil keyword bypass](https://junglewise.ai/threats/cve-2026-112017-jeecgboot-before-3-9-5-contains-an-sql-injection-vulnerability)
- [JeecgBoot missing authorization in getUserDetailByUserId](https://junglewise.ai/threats/cve-2026-108891-jeecgboot-through-3-9-5-contains-a-missing-authorization)
- [JeecgBoot authorization bypass in SysDepartRoleController exportXls](https://junglewise.ai/threats/cve-2026-108888-jeecgboot-through-3-9-5-contains-a-missing-authorization)