JeecgBoot versions up to 3.9.5 contain a missing authorization flaw that allows any authenticated user to read confidential MCP server configuration. The flaw arises because the permission check for the /airag/airagMcp/queryById endpoint is commented out, enabling attackers to retrieve critical details such as endpoint URLs, headers, and outbound authentication tokens. This unauthorized disclosure can compromise system integrity and confidentiality.

The affected product is JeecgBoot, specifically all releases through version 3.9.5. The vulnerability is exercised via the /airag/airagMcp/queryById endpoint, and attackers can simplify discovery of record IDs by interacting with the unguarded /airag/app/queryById API.

The CVSS score of 7.1 categorizes this as a High‑severity issue. Although the EPSS score is not provided and the vulnerability is not listed in CISA’s KEV catalog, the vulnerability requires only authentication, which is commonly available in internal or compromised environments, making exploitation somewhat likely for insiders or attackers who have breached the system. The absence of a known public exploit does not diminish the risk given the broad access granted once credentials are obtained.