Server-Side Request Forgery in RAGFlow Product by Infiniflow

CVE-2026-75898

What is CVE-2026-75898?

RAGFlow versions prior to 0.26.3 are prone to a server-side request forgery vulnerability located in the 'Invoke' component. This issue arises when the component generates an outbound request URL from canvas configuration and runtime template variables, forwarding it to requests such as GET, POST, and PUT. Notably, the implementation fails to utilize the shared assert_url_is_safe validator, leaving the system open to requests to internal, potentially harmful destinations, including cloud instance metadata endpoints and local services that may be co-located within the deployment network. Users with the ability to create or trigger agents can exploit this flaw, directing the server to issue requests to loopback and link-local addresses, which could expose sensitive information or lead to further attacks.

References