CVE-2025-56396

8.8 highEPSS 0.3%

High (8.8) in ruoyi ruoyi. EPSS 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Ruoyi 4.8.1 allowing attackers to gain escalated privileges due to the owning department having higher rights than the active user.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2025-11-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ruoyi:ruoyi

References

https://gist.github.com/Han-tj/22cfd18fa9f116bb886e8e56782f6865
https://gitee.com/y_project/RuoYi/issues/ICJ865

Check your stack JSON