Access Control Vulnerability in SpringBlade by Chillzhuang
CVE-2025-70983

9.9CRITICAL

Key Information:

Vendor

Chillzhuang

Status
SpringBlade
Vendor
CVE Published:
23 January 2026

What is CVE-2025-70983?

SpringBlade version 4.5.0 contains an access control vulnerability in the authRoutes function, which can be exploited by users with low-level privileges. This flaw allows unauthorized users to escalate their privileges, potentially leading to unauthorized access to sensitive information and administrative functions. It is crucial for users and administrators of SpringBlade to review access controls and permissions to mitigate this security risk.

References

https://github.com/chillzhuang/SpringBlade
https://github.com/chillzhuang/SpringBlade/issues/35
https://gist.github.com/old6ma/9c4d2ba32cd8f562cb80796538...

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.