Is CVE-2026-121585 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-121585 being exploited in the wild.

How severe is CVE-2026-121585?

Medium severity, with a CVSS score of 4.3, published 4 November 2026.

Which products and versions are affected?

InfiniFlow RAGFlow up to 0.27.2 and 1.0.0-rc2, when deployed with DOC_ENGINE=infinity.

Is there a fix for CVE-2026-121585?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-121585 attacked?

It is attacked over the network.

Am I affected by CVE-2026-121585?

Check whether you run InfiniFlow RAGFlow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-121585: InfiniFlow RAGFlow authorization bypass in Text To SQL Retrieval

CVE-2026-121585 · Severity: medium · CVSS 4.3 · Published 2026-11-04

RAGFlow is a retrieval-augmented generation (RAG) engine that converts user questions into SQL queries and executes them against a document database. When using the Infinity document engine, an authenticated user can craft SQL queries that bypass tenant isolation and read other tenants' knowledge bases, including document content. An attacker with a valid account can extract sensitive data from other organizations' documents without authorization.

Technologies: InfiniFlow RAGFlow. Vendors: InfiniFlow.

Quick answers

Is CVE-2026-121585 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-121585 being exploited in the wild.
How severe is CVE-2026-121585?: Medium severity, with a CVSS score of 4.3, published 4 November 2026.
Which products and versions are affected?: InfiniFlow RAGFlow up to 0.27.2 and 1.0.0-rc2, when deployed with DOC_ENGINE=infinity.
Is there a fix for CVE-2026-121585?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-121585 attacked?: It is attacked over the network.
Am I affected by CVE-2026-121585?: Check whether you run InfiniFlow RAGFlow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The RunSQL function in internal/engine/infinity/sql.go fails to validate the tableName parameter or enforce tenant isolation before executing SQL against Infinity via psql. The unauthenticated Infinity PostgreSQL interface has no permission model, allowing a single SELECT statement with a crafted table reference to read across tenant boundaries. Exploitation requires network access to the RAGFlow web interface and a valid user account, but no additional interaction from the victim is needed.

Affected products

InfiniFlow RAGFlow up to 0.27.2 and 1.0.0-rc2, when deployed with DOC_ENGINE=infinity

Timeline

2026-11-04: disclosed
2026-10-08: exploited: verified against main branch at this date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.