Youlai-Boot CVE Vulnerabilities

By Youlai — 2 known vulnerabilities

Critical
0
High
2
Medium
0
Low
0
None
0

All Youlai-Boot CVEs

Recent Highest Score Oldest
CVE-2025-66736
7.1 high

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting in an authorization bypass vulnerabilit

Dec 22, 2025
CVE-2025-66735
7.5 high

youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles.

Dec 22, 2025