CVE-2025-56396

An issue was discovered in Ruoyi 4.8.1 allowing attackers to gain escalated privileges due to the owning department having higher rights than the active user.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2025-11-26

Last modified

2025-12-04

Weaknesses

CWE-284

Affected products

• Ruoyi (Ruoyi)

References

• https://gist.github.com/Han-tj/22cfd18fa9f116bb886e8e56782f6865
• https://gitee.com/y_project/RuoYi/issues/ICJ865