{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ayoulaiyoulai_boot/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:youlai:youlai_boot:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-110215"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["youlai-boot (\u003c= 2.21.1)"],"_cs_severities":["high"],"_cs_tags":["privilege-escalation","web-application","rbac-bypass"],"_cs_type":"advisory","_cs_vendors":["youlai"],"content_html":"\u003cp\u003eCVE-2026-110215 describes a missing authorization vulnerability in youlai-boot versions up to 2.21.1. The flaw resides within the role permission management API, specifically the PUT /api/v1/roles/{roleId}/menus endpoint. An authenticated user, including low-privileged accounts such as a test or guest account, can interact with this endpoint to arbitrarily modify permissions assigned to specific roles. By assigning administrative menu and button permissions to their own role and triggering a refresh of the Redis-backed permission cache, an attacker can effectively escalate their privileges to administrator-equivalent access. This vulnerability poses a significant risk to organizations relying on youlai-boot for role-based access control (RBAC), as it allows for trivial bypass of intended security boundaries within the application.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of CVE-2026-110215 results in complete privilege escalation within the youlai-boot application. An attacker with minimal user privileges can grant themselves full administrative control, enabling unauthorized access to sensitive data, administrative features, and management of other user accounts. This compromises the integrity and confidentiality of the entire application environment.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized actions for security and IT teams:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade youlai-boot to a version later than 2.21.1 immediately to patch the authorization flaw.\u003c/li\u003e\n\u003cli\u003eAudit access logs for the PUT /api/v1/roles/{roleId}/menus endpoint to identify potentially unauthorized role permission modifications.\u003c/li\u003e\n\u003cli\u003eReview all current role and permission assignments within the application for discrepancies or signs of unauthorized elevation.\u003c/li\u003e\n\u003cli\u003eEnforce strict monitoring on sensitive API endpoints that modify application-level access controls.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T04:38:25Z","date_published":"2026-10-14T04:38:25Z","id":"https://feed.craftedsignal.io/briefs/2026-10-youlai-boot-auth-bypass/","summary":"An authenticated low-privileged user can exploit a missing authorization vulnerability in youlai-boot to assign administrative permissions to their own role and elevate privileges.","title":"CVE-2026-110215: Privilege Escalation in youlai-boot via Missing Authorization","url":"https://feed.craftedsignal.io/briefs/2026-10-youlai-boot-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:youlai:youlai_boot:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}