Path Traversal Vulnerability in RAGFlow Affected by Infiniflow

CVE-2026-93013

What is CVE-2026-93013?

RAGFlow through version 0.27.2 is affected by a path traversal vulnerability that enables authenticated attackers to gain unauthorized access to sensitive files. By exploiting the dev_insert_chunks_from_file and dev_insert_metadata_from_file endpoints, attackers can provide absolute file paths through the file_path parameter. This flaw arises from insufficient path validation, allowing attackers with valid access tokens to read any file accessible to the service. Disclosure is restricted to files that conform to expected JSON structures, which can subsequently be utilized in datasets.

References