A critical server-side template injection (SSTI) vulnerability in RAGFlow's prompt generator enables authenticated remote code execution. The flaw resides in rag/prompts/generator.py where Jinja2 template rendering processes attacker-controlled input without sufficient sandboxing. Any authenticated user—including self-registered accounts—can exploit this by crafting a Canvas workflow that chains DuckDuckG [truncated]
CVE-2026-28797 is a Server-Side Template Injection (SSTI) vulnerability in RAGFlow, an open-source RAG (Retrieval-Augmented Generation) engine. The vulnerability exists in the Agent workflow Text Processing (StringTransform) and Message components, which use Python's jinja2.Template (unsandboxed) to render user-supplied templates. This allows any authenticated user to execute arbitrary operating system co [truncated]
