Vulnerability · Published Oct 9, 2026 · Assigned by VulnCheck
CVE-2026-108112ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint
Medium 5.4
In plain English
A medium-severity missing authorization in ruoyi-ai from ageerle. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)5.4Medium
Exploit odds (30 days)0.2%top 87.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST /workflow/del/{uuid}. Attackers can obtain workflow UUIDs from GET /workflow/search and supply them because softDelete() skips the PrivilegeUtil.checkAndGetByUuid() ownership check, removing owners' workflows.
Affected products (as reported)
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
References
- RuoYi AI exposes private workflow definitions and permits cross user soft deletion technical-description, exploit
- WorkflowService.softDelete() at v3.1.0 technical-description
- WorkflowController /workflow/del/{uuid} at v3.1.0 technical-description
- https://github.com/ageerle/ruoyi-ai product
- VulnCheck Advisory: ruoyi-ai 3.0.0 through 3.1.0 Missing Authorization via Workflow Delete Endpoint third-party-advisory