JeecgBoot versions up to 3.9.5 contain an insecure direct object reference flaw in the AiragBaseApiController. The flaw allows an authenticated user to request the values of other users’ AI chat variables by supplying a username in the POST payload to /airag/api/getChatVariable. By sending a POST request containing a target application ID, a chosen username, and the variable name, the attacker can retrieve the stored chat memory values for any user from Redis. This exposure violates confidentiality and is a By‑User‑Controlled Key flaw (CWE‑639).

The vulnerability affects all installations of JeecgBoot that include the Airag module, specifically versions 3.9.5 and earlier. The affected component is the AiragBaseApiController within the Airag module and no later sub‑versions beyond 3.9.5 have been identified as vulnerable.

With a CVSS score of 5.3, the vulnerability presents a moderate risk level and can be exploited remotely by any authenticated user with access to the /airag/api/getChatVariable endpoint. The EPSS score is not available, so the likelihood of exploitation cannot be quantified, and the issue is not listed in the CISA KEV catalog. The attack requires only constructing a POST request with a valid session, a target app ID, a username belonging to another user, and the name of the chat variable. Successful exploitation results in the disclosure of potentially sensitive or private user conversation data.