Incorrect access control in the selectDept function of RuoYi v4.8.2 allows unauthorized attackers to arbitrarily access sensitive department data.

CVE-2025-70986 is an incorrect access control vulnerability in the selectDept function of RuoYi v4.8.2. This security flaw allows unauthorized attackers to arbitrarily access sensitive department data without proper authentication or authorization. The vulnerability affects the popular RuoYi framework, which is widely used for enterprise application development. The issue has been documented with proof-of-concept code and is being tracked in the project's issue tracker. Organizations using RuoYi v4.8.2 should assess their exposure and consider upgrading to a patched version when available.