Skip to content

CVE record · 1 source

CVE-2026-108671

CVSS 6.5

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because…

Vendor: Anthropic
Product: Claude, AI / LLM tooling
CVSS: 6.5
Exposure class: AI infrastructure

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

8

CVE NVD 21d ago

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because…

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check is commented out. Attackers can obtain record ids…

CVSS 6.5 CVE-2026-108671 Anthropic