repository icon
infiniflow / ragflow Project repository

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN8 DAYS

FIX

WITHINN/A DAYS

RAGFlow: Unauthenticated IDOR exposes private document thumbnails and extracted...
surrealgrain
self closed
Sandbox bypass in SecurePythonAnalyzer: attribute-based invocations evade static...
haan0913
duplicate
High
SSRF in self-hosted data-source connectors (WebDAV / Confluence / GitLab / Seafi...
goldberg8
self closed
Unauthenticated SSRF-to-Cloud-Metadata-Exfiltration via Agent Canvas MCP Tool In...
uchalm
self closed
Sandbox Escape via AST Security Check Bypass in executor_manager
wulonchia-pro
duplicate
Critical
Stored XSS via malicious .docx upload — mammoth HTML output rendered without DOM...
foodlook
self closed
Verbose Error Messages Leak Internal Paths, DB Config, and Library Versions via...
foodlook
self closed
Unsafe pickle.loads in deserialize_b64 — RestrictedUnpickler exists but disabled...
foodlook
self closed
SSRF in /upload_info endpoint — missing is_valid_url check allows headless brows...
foodlook
self closed
Python sandbox security filter bypass via importlib and __builtins__ subscript i...
jayantkamble10000
duplicate
High
Unauthenticated arbitrary file upload to any canvas via /v1/canvas/upload/<canva...
nisartest20-bit
self closed
AST-Based Python Sandbox Analyzer Is Trivially Bypassed via __class__.__mro__.__...
pkmdev-sec
duplicate
High
Sandbox Security Analyzer Bypass via __builtins__ Access and Class Hierarchy Tra...
anlor1002-alt
duplicate
High
Remote Code Execution (RCE) via insecure eval() in _rank_feature_scores
finddabugs
duplicate
Critical
Stored Code Injection via `eval()` on User-Controlled `tag_feas` Field → Post-Au...
microwaveovens-yay
duplicate
High
Sandbox Escape via `importlib` → Unauthenticated Arbitrary File Read + Credentia...
microwaveovens-yay
duplicate
High
Remote Code Execution via eval() on Search Index Data in rag/nlp/search.py
codecoincognition
duplicate
High
Code Injection via eval() on Document Store TAG_FLD Data in Search Pipeline
lamkus
duplicate
None
Multiple Sandbox Security Bypasses in Python AST Analyzer + Missing NodeJS Analy...
lexi-core-ai
duplicate
Critical
PubMed Agent Tool Parses Untrusted XML with xml.etree.ElementTree — Billion Laug...
willardjansen
self closed
Hardcoded RSA Passphrase 'Welcome' Enables Decryption of All User Passwords — Pr...
willardjansen
self closed
RAGFlow: SQL Injection via string_format() in ExeSQL Tool -- User Query Directly...
iamveene
self closed
RAGFlow: IDOR in /getsse/<dialog_id> -- Cross-Tenant Dialog Configuration Exposu...
iamveene
self closed
RAGFlow: Unsafe pickle.loads() in deserialize_b64() Disabled by Default Safety M...
iamveene
self closed
RAGFlow: SSRF via Unauthenticated /test_mcp Endpoint -- Missing @login_required...
iamveene
self closed
Unauthenticated SSRF via Missing Auth on /mcp_server/test_mcp Endpoint
jeremysommerfeld8910-cpu
self closed
Unsafe Pickle Deserialization Enabled by Default in Database Layer
alsaibai
pending
Arbitrary File Write via Path Traversal in PDFGenerator Component
optimus-fulcria
pending
Authorization Bypass in web_crawl Endpoint Due to Inverted Permission Check
moveq-memida
pending
Full-read SSRF via upload_info endpoint — zero URL validation with crawl4ai head...
iiviel
pending
SSRF via Missing URL Validation in /document/upload_info and /canvas/<id>/upload...
jhacksman
self closed
SSRF Protection Bypass via IPv6 Loopback ([::1]) & DNS Rebinding in is_valid_url
vishnudev55
pending
Cloud Metadata Credential Disclosure via Agent Invoke Component...
alan-tiger
pending
SSRF to RCE via Unauthenticated Sandbox API in Agent Invoke Component...
alan-tiger
pending