The vulnerability arises from improper handling of the perms argument in SysPermissionService.getMenuPermission, which allows an attacker to manipulate permissions assigned to their session. This flaw leads to privilege escalation, permitting unauthorized users to gain higher access levels. The weakness is consistent with CWE-266 and CWE-269, reflecting improper authorization and privilege escalation vulnerabilities.

The affected software is yangzongzhuan RuoYi‑Vue up to version 3.9.2. The Permission Service component, specifically SysPermissionService.java’s getMenuPermission method, is susceptible. No patched version is documented, but any release superseding 3.9.2 should be reviewed for mitigations.

The CVSS score of 5.3 indicates medium severity, and there is no EPSS score available, so the likelihood of exploitation cannot be quantified from the data. The vulnerability is not listed in CISA KEV, suggesting no publicly known exploits yet. Attack may be launched remotely against the getMenuPermission endpoint, potentially without authentication as the description notes remote initiation. Overall, moderate risk remains until a vendor update is applied.