CVE-2025-56396

High · 8.8

CVSS

8.8

EPSS

0.3%

Published

Nov 26, 2025

CISA due date

—

The record

An issue was discovered in Ruoyi 4.8.1 allowing attackers to gain escalated privileges due to the owning department having higher rights than the active user.

Affected packages

Ecosystem	Package	Introduced	Fixed