infiniflow Latest Vulnerabilities
Latest vulnerabilities published by infiniflow
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Access Control Vulnerability in Infiniflow Ragflow Product
CVE-2026-51892InfiniflowRagflow6.5MEDIUMIncorrect Access Control in Infiniflow Ragflow Product by Infiniflow
CVE-2026-51893InfiniflowRagflow9.8CRITICALIncorrect Access Control in Infiniflow Ragflow Software
CVE-2026-51894InfiniflowRagflow6.5MEDIUMImproper Access Control in Ragflow by Infiniflow
CVE-2026-51895InfiniflowRagflow6.5MEDIUMImproper Access Control in Infiniflow Ragflow by Infiniflow
CVE-2026-51896InfiniflowRagflow6.5MEDIUMPath Traversal Vulnerability in RAGFlow Affected by Infiniflow
CVE-2026-93013InfiniflowRagflow5.3MEDIUMServer-Side Request Forgery in RAGFlow Product by Infiniflow
CVE-2026-75898InfiniflowRagflow8.4HIGHStored Cross-Site Scripting in RAGFlow by Infiniflow
CVE-2026-58579InfiniflowRagflow👾🟡5.1MEDIUMJinja2 Template Injection Vulnerability in RAGFlow Open-Source Engine
CVE-2026-45312InfiniflowRagflow9.9CRITICALServer-Side Template Injection Vulnerability in RAGFlow by Infiniflow
CVE-2026-28797InfiniflowRagflow8.7HIGHZip Slip Vulnerability in RAGFlow Open-Source Engine
CVE-2026-24770InfiniflowRagflow9.8CRITICALInsecure Key Generation in RAGFlow API Allows Token Derivation
CVE-2025-69286InfiniflowRagflow8.9HIGHArbitrary Code Execution Vulnerability in RAGFlow Open-Source Engine
CVE-2025-68700InfiniflowRagflow8.6HIGHStored Cross-Site Scripting Vulnerability in RAGFlow by Infiniflow
CVE-2025-51462InfiniflowRAGFlow6.1MEDIUMAccount Takeover Vulnerability in RAGFlow by Infiniflow
CVE-2025-48187InfiniflowRagflow9.8CRITICALServer-Side Request Forgery Vulnerability in Infiniflow/Ragflow by Infiniflow
CVE-2024-12779InfiniflowInfiniflow/ragflow7.5HIGHImproper Authentication Vulnerability in Ragflow by Infiniflow
CVE-2024-12869InfiniflowInfiniflow/ragflow4.3MEDIUMXSS Vulnerability in Ragflow by Infiniflow Exposes User Data
CVE-2024-12871InfiniflowInfiniflow/ragflow5.4MEDIUMMultiple Vulnerabilities in Infiniflow Ragflow Affecting Internal Network Security
CVE-2024-12450InfiniflowInfiniflow/ragflow9.8CRITICALStored Cross-Site Scripting Vulnerability in Infiniflow's Ragflow
CVE-2024-12870InfiniflowInfiniflow/ragflow5.4MEDIUMRemote Code Execution Vulnerability in RagFlow by Infiniflow
CVE-2024-12433InfiniflowInfiniflow/ragflow9.8CRITICALAccount Access Vulnerability in RAGFlow by infiniflow
CVE-2024-12880InfiniflowInfiniflow/ragflow6.5MEDIUMSQL Injection Vulnerability in RAGFlow Open-Source Engine
CVE-2025-27135InfiniflowRagflow8.9HIGHInsecure Direct Object Reference in RAGFlow Open-Source Engine
CVE-2025-25282InfiniflowRagflow8.1HIGHImproper Access Control in RAGFlow Leads to Unauthorized Document Access
CVE-2024-53450InfiniflowRAGFlow7.5HIGH