From 7637ab391d4a3d2c910c8e265033b155d5c8fea9 Mon Sep 17 00:00:00 2001 From: junjun Date: Mon, 8 Jun 2026 17:01:44 +0800 Subject: [PATCH] fix: Fix the privilege escalation vulnerability in system variables --- backend/apps/system/crud/system_variable.py | 1 - 1 file changed, 1 deletion(-) diff --git a/backend/apps/system/crud/system_variable.py b/backend/apps/system/crud/system_variable.py index bfc5faf0..0ead75d2 100644 --- a/backend/apps/system/crud/system_variable.py +++ b/backend/apps/system/crud/system_variable.py @@ -49,7 +49,6 @@ def list_all(session: SessionDep, trans: Trans, variable: SystemVariable): data = SystemVariable(**r.__dict__) if data.type == 'system': data.name = trans(data.name) - del data.value res.append(data) return res