Youlai vulnerabilities
We track 2 vulnerabilities in Youlai products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 22, 2025.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Youlai vulnerabilities
- 7.1 High severity
Youlai-boot: Improper Access Control
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The importUsers function in SysUserController.java does not perform a permission check on the current user's identity, which may allow regular users to import user data into the database, resulting
- 7.5 High severity
Youlai-boot: Improper Access Control
youlai-boot V2.21.1 is vulnerable to Incorrect Access Control. The getRoleForm function in SysRoleController.java does not perform permission checks, which may allow non-root users to directly access root roles.