Remote Command Execution Vulnerability in JeecgBoot by Jeecg
CVE-2026-75411

9.8CRITICAL

Key Information:

Vendor

Jeecg

Status
JeecgBoot
Vendor
CVE Published:
26 August 2026

What is CVE-2026-75411?

JeecgBoot v3.9.2 contains a vulnerability that allows for remote command execution due to improper handling of Groovy scripts. The CodeNode component within the AI Flow module provides the capability to execute Groovy scripts. While the implementation includes a blacklist in the SecurityCheck class to block potentially harmful calls, the innate flexibility and dynamic characteristics of Groovy enable attackers to circumvent this protection. By utilizing string concatenation and reflection techniques, malicious actors could inject and execute arbitrary commands, posing significant security risks to users.

References

https://github.com/jeecgboot/JeecgBoot/issues/9691

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.