JeecgBoot versions up to and including 3.9.5 contain a missing authorization flaw in the AiragExtDataController deleteBatch endpoint. The handler accepts a comma‑separated list of record identifiers and removes them without performing owner or tenant validation, allowing any authenticated user to delete AI evaluator and test‑tracking records belonging to other users.

Instances of the JeecgBoot platform running version 3.9.5 or earlier are affected. The flaw exists only in the Airag module of these releases; later releases or other products are not known to be impacted.

The CVSS score of 5.3 indicates moderate risk. No EPSS information is available, so the likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Because authentication is required, an attacker must first obtain valid user credentials or an authenticated session. Once authenticated, the attacker can issue a DELETE request to /airag/extData/deleteBatch with arbitrary identifiers, resulting in the removal of cross‑tenant data.