CVE-2026-108667 [MEDIUM] – JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-pri

JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt templates by calling the revertRecycleBin endpoint. Attackers can send PUT requests to /airag/prompts/revertRecycleBin with chosen template ids to clear deleted flags, undoing administrator removals.