
Proof-of-concept exploit for CVE-2026-38812, a SQL injection vulnerability in RuoYi v4.8.2 via the /tool/gen/createTable endpoint, enabling unauthorized database access.
[CVE ID]
CVE-2026-38812
[PRODUCT]
RuoYi
[VERSION]
v4.8.2
[PROBLEM TYPE]
SQL Injection
[DESCRIPTION]
RuoYi v4.8.2 is vulnerable to SQL Injection via the /tool/gen/createTable endpoint.