CVE-2026-93013 is a path traversal vulnerability in RAGFlow through version 0.27.2. This vulnerability allows authenticated attackers to read arbitrary files by supplying absolute file paths in the file_path parameter of the dev_insert_chunks_from_file and dev_insert_metadata_from_file endpoints. The vulnerability exists due to missing path validation, enabling attackers with valid access tokens to exploi [truncated]
CVE-2026-75898 is a high-severity vulnerability in RAGFlow, an open-source project, affecting versions prior to 0.26.3. The vulnerability is caused by a server-side request forgery (SSRF) in the agent workflow 'Invoke' component. An attacker can exploit this vulnerability to direct the server to fetch loopback, link-local, and RFC 1918 destinations, including cloud instance metadata endpoints and services [truncated]
A critical server-side template injection (SSTI) vulnerability in RAGFlow's prompt generator enables authenticated remote code execution. The flaw resides in rag/prompts/generator.py where Jinja2 template rendering processes attacker-controlled input without sufficient sandboxing. Any authenticated user—including self-registered accounts—can exploit this by crafting a Canvas workflow that chains DuckDuckG [truncated]
CVE-2026-28797 is a Server-Side Template Injection (SSTI) vulnerability in RAGFlow, an open-source RAG (Retrieval-Augmented Generation) engine. The vulnerability exists in the Agent workflow Text Processing (StringTransform) and Message components, which use Python's jinja2.Template (unsandboxed) to render user-supplied templates. This allows any authenticated user to execute arbitrary operating system co [truncated]
