Security Advisory
CVE-2025-46175
7.5
HIGH
Vulnerability Description
Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the authRole method of SysUserController.java.
Published Date
November 26, 2025
Official Source
NIST NVD Advisory