infiniflow Ragflow Vulnerabilities

Infiniflow Ragflow vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

27 January 2026

Zip Slip Vulnerability in RAGFlow Open-Source Engine
CVE-2026-24770
InfiniflowRagflow9.8CRITICAL

31 December 2025

Insecure Key Generation in RAGFlow API Allows Token Derivation
CVE-2025-69286
InfiniflowRagflow8.9HIGH
Arbitrary Code Execution Vulnerability in RAGFlow Open-Source Engine
CVE-2025-68700
InfiniflowRagflow8.6HIGH

17 May 2025

Account Takeover Vulnerability in RAGFlow by Infiniflow
CVE-2025-48187
InfiniflowRagflow9.8CRITICAL

25 February 2025

SQL Injection Vulnerability in RAGFlow Open-Source Engine
CVE-2025-27135
InfiniflowRagflow8.9HIGH

21 February 2025

Insecure Direct Object Reference in RAGFlow Open-Source Engine
CVE-2025-25282
InfiniflowRagflow8.1HIGH