---
id: "CVE-2026-126997"
page: "https://infrastack.ai/live/CVE-2026-126997"
kind: "vulnerability"
aliases: ["CVE-2026-126997"]
title: "JeecgBoot: flow-run endpoint lets a remote caller forge server-side requests"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "JeecgBoot", "fixed": [], "affected": "<= 3.9.6", "ecosystem": "maven"}]
ecosystems: []
tags: ["java", "jeecgboot", "package", "self-hosted"]
not_affected_if: ["airag-module-not-deployed"]
published_at: "2026-11-12T15:17:49+00:00"
first_seen_at: "2026-11-12T15:41:57+00:00"
updated_at: "2026-11-12T15:45:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126997", "first_seen_at": "2026-11-12T15:41:57+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126997", "first_seen_at": "2026-11-12T15:45:14+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-126997", "https://github.com/jeecgboot/JeecgBoot/releases"]}]
exploit_sources: []
---

# JeecgBoot: flow-run endpoint lets a remote caller forge server-side requests

Link for people: https://infrastack.ai/live/CVE-2026-126997 (this .md is for agents)

NVD lists JeecgBoot up to 3.9.6 as having a server-side request forgery in the airag flow-run endpoint (RestTemplate.exchange). A remote caller can make the server send requests to addresses of their choosing. The vendor reportedly did not respond, and no fixed version is known.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- maven:JeecgBoot affected <= 3.9.6 fixed no fixed version listed

## How to check

Check your JeecgBoot version: 3.9.6 (released 5 Nov 2026) and earlier are listed as affected. Check whether the airag module (/airag/ paths, AI flow orchestration) is deployed and reachable. Whether the flow-run endpoint needs a login is not stated in any source I found, so restrict access to it at the gateway or firewall until you know.

## Timeline

- 2026-11-12T15:41:57+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126997
- 2026-11-12T15:45:14+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-126997 — NVD only: no maintainer advisory or issue for this flow-run SSRF found. Vendor reportedly did not respond. v3.9.6 (5 Nov) is the latest release and is itself listed as affected, so no fixed version is known. Earlier airag SSRFs (/airag/chat/send, airagModel/test) were different issues. Auth and default-on status unconfirmed. Nothing verified.

## Documents

- [advisory] NVD CVE-2026-126997 https://nvd.nist.gov/vuln/detail/CVE-2026-126997
- [mentions] JeecgBoot releases (v3.9.6, 5 Nov) https://github.com/jeecgboot/JeecgBoot/releases

## From the sources

A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeecg/modules/airag/flow/c/a.class of the component flow-run Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_