Improper authorization in ageerle ruoyi-ai SysModelController
Date: 2025
Affected: ageerle/ruoyi-ai <=2.0.1
Attack vector: auth-bypass
Category: vulnerability-disclosure
Severity: High

Critical vulnerability in ageerle ruoyi-ai up to 2.0.1 affecting SysModelController.java API leading to improper authorization.


Mitigations:

Architectural layers (MAESTRO):