CyberSecBulletin

Ageerle vulnerabilities

We track 3 vulnerabilities in Ageerle products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 22, 2025.

3vulnerabilities
3critical
0high
0exploited
9.6average CVSS score

Latest Ageerle vulnerabilities

  • 9.8 Critical severity

    ruoyi-ai: Unrestricted Upload of File with Dangerous Type

    CVE-2025-6466Ageerle

    A vulnerability was found in ageerle ruoyi-ai 2.0.0 and classified as critical. Affected by this issue is the function speechToTextTranscriptionsV2/upload of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/service/impl/SseServiceImpl.java. T

  • 9.1 Critical severity

    ruoyi-ai: Incorrect Privilege Assignment

    CVE-2025-3202Ageerle

    A vulnerability classified as critical has been found in ageerle ruoyi-ai up to 2.0.0. Affected is an unknown function of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysNoticeController.java. The manipulation leads to i

  • 9.8 Critical severity

    ruoyi-ai: Incorrect Privilege Assignment

    CVE-2025-3199Ageerle

    A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical. Affected by this issue is some unknown functionality of the file ruoyi-modules/ruoyi-system/src/main/java/org/ruoyi/system/controller/system/SysModelController.java of the co