Executive brief
RAGapp, an application used to deploy Agentic Retrieval-Augmented Generation (RAG) services, contains a security flaw in its file management system. An attacker with access to the management interface can upload or delete files outside of the designated storage folder by using specially crafted filenames. This could allow an unauthorized user to corrupt data, cause a service outage, or overwrite critical application files.
Technical details
A path traversal vulnerability (CWE-22) exists in RAGapp versions up to 0.1.5 within the `FileHandler.upload_file` and `FileHandler.remove_file` functions in `src/ragapp/backend/controllers/files.py`. The application fails to sanitize user-provided filenames before using them in filesystem operations, specifically concatenating them directly with the `data/` directory prefix. A remote attacker with access to the management API (POST /api/management/files) can use traversal sequences like `../` to write or delete files in arbitrary locations on the server's filesystem. While an extension check exists, it is insufficient as it only validates the suffix of the traversal string. A pull request (#294) has been submitted to address the issue by normalizing paths and rejecting traversal components.
Affected products
- ragapp RAGapp 0.1.0 to 0.1.5
Timeline
- 2026-05-27: disclosed: Issue and fix PR submitted to GitHub repository
- 2026-06-28: advisory: NVD/VulDB publication date