CVE-2026-7710 — Improper authentication in YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java

A security flaw has been discovered in YunaiV yudao-cloud up to version 3.8.0, affecting the doFilterInternal function in JwtAuthenticationTokenFilter.java in the Ruoyi-Vue-Pro component. Manipulating the mock-token argument results in improper authentication. Remote exploitation is possible, and an exploit has been released publicly. The vendor was contacted early about the disclosure but did not respond.