ruoyi-ai SysModelController authorization bypass (CVE-2025-3199)
A security researcher reported that the SysModelController component in the open-source ruoyi-ai platform lacks authorization controls, potentially allowing attackers to read, create, modify and delete large model configurations without credentials.
What happened
The SysModelController component of ruoyi-ai lacked authorization checks on multiple API endpoints. Attackers could add, delete, modify and query the system's large model configuration without access credentials through endpoints including /list, /export, POST methods for adding models, and PUT methods for editing models.
Index analysis
The vulnerability was detected through automated AI code audit tooling applied to the project's latest source code as of 29 March 2025. The vulnerability exists in the SysModelController.java file where multiple methods lack the @SaCheckPermission annotation present on other delete operations.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.