infiniflow Ragflow Vulnerabilities
Infiniflow Ragflow vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross Site Scripting Vulnerability in InfiniFlow RAGFlow Product
CVE-2026-121928InfiniflowRagflow5.1MEDIUMServer-Side Request Forgery in InfiniFlow RAGFlow Affected by Seafile Connector
CVE-2026-121927InfiniflowRagflow5.3MEDIUMAuthorization Bypass Vulnerability in InfiniFlow RAGFlow Product
CVE-2026-121585InfiniflowRagflow👾🟡5.3MEDIUMAccess Control Vulnerability in RAGFlow Open-Source Engine
CVE-2026-119337InfiniflowRagflow7.1HIGHPath Traversal Vulnerability in RAGFlow Affected by Infiniflow
CVE-2026-93013InfiniflowRagflow5.3MEDIUMServer-Side Request Forgery in RAGFlow Product by Infiniflow
CVE-2026-75898InfiniflowRagflow8.4HIGHStored Cross-Site Scripting in RAGFlow by Infiniflow
CVE-2026-58579InfiniflowRagflow👾🟡5.1MEDIUMJinja2 Template Injection Vulnerability in RAGFlow Open-Source Engine
CVE-2026-45312InfiniflowRagflow9.9CRITICALServer-Side Template Injection Vulnerability in RAGFlow by Infiniflow
CVE-2026-28797InfiniflowRagflow8.7HIGHZip Slip Vulnerability in RAGFlow Open-Source Engine
CVE-2026-24770InfiniflowRagflow9.8CRITICALInsecure Key Generation in RAGFlow API Allows Token Derivation
CVE-2025-69286InfiniflowRagflow8.9HIGHArbitrary Code Execution Vulnerability in RAGFlow Open-Source Engine
CVE-2025-68700InfiniflowRagflow8.6HIGHAccount Takeover Vulnerability in RAGFlow by Infiniflow
CVE-2025-48187InfiniflowRagflow9.8CRITICALSQL Injection Vulnerability in RAGFlow Open-Source Engine
CVE-2025-27135InfiniflowRagflow8.9HIGHInsecure Direct Object Reference in RAGFlow Open-Source Engine
CVE-2025-25282InfiniflowRagflow8.1HIGH