An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/jeecgboot/JeecgBoot/issues/9774 |
|
History
Mon, 17 Aug 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Remote Code Execution via Files Parameter in JeecgBoot AI Chat Module | |
| Weaknesses | CWE-20 CWE-730 |
Mon, 17 Aug 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Jeecgboot
Jeecgboot jeecgboot |
|
| Vendors & Products |
Jeecgboot
Jeecgboot jeecgboot |
Mon, 17 Aug 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-17T20:35:19.859Z
Reserved: 2026-07-30T00:00:00.000Z
Link: CVE-2026-67926
No data.
Status : Received
Published: 2026-08-17T21:16:47.507
Modified: 2026-08-17T21:16:47.507
Link: CVE-2026-67926
No data.
OpenCVE Enrichment
Updated: 2026-08-17T22:30:04Z