JeecgBoot up to version 3.9.5 contains a missing authorization flaw in the AiragPromptsController queryById method. This flaw allows authenticated users who do not have administrative privileges to read any AI prompt template, including the prompt text, model parameters, and creator details of administrators or other users. The vulnerability is a classic lack of access control (CWE‑862) and results in the disclosure of sensitive configuration information that could be leveraged for further attacks.

The affected product is JeecgBoot, released by the vendor JeecgBoot. All installations running any version up to and including 3.9.5 are susceptible. No other products or versions are listed as affected.

The CVSS score of 5.3 indicates a medium severity risk. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. Attackers need only to be authenticated but not privileged, which is a low threshold for many organizations. By enumerating prompt IDs via the unprotected /airag/prompts/list endpoint, a malicious user can systematically retrieve every prompt. The impact is the exposure of potentially sensitive business logic and user information, which could aid in social engineering or further exploitation.