Is CVE-2026-58579 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-58579 being exploited in the wild.

How severe is CVE-2026-58579?

Medium severity, with a CVSS score of 5.4, published 2 July 2026.

Which products and versions are affected?

InfiniFlow RAGFlow before 0.26.3.

Is there a fix for CVE-2026-58579?

A patch was published on 2026-07-01: Fix merged into main branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-58579 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-58579?

Check whether you run InfiniFlow RAGFlow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-58579: infiniflow RAGFlow stored XSS in agent pipeline node name

CVE-2026-58579 · Severity: medium · CVSS 5.4 · Published 2026-07-02

RAGFlow, an open-source RAG (Retrieval-Augmented Generation) engine, is vulnerable to a security flaw where malicious code can be embedded in agent pipeline names. An attacker with workspace access can create a specially named agent that, when viewed by another user, executes unauthorized scripts in their browser. This could lead to the theft of login tokens or full account takeover of other team members within the same workspace.

Technologies: InfiniFlow RAGFlow. Vendors: InfiniFlow.

Quick answers

Is CVE-2026-58579 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-58579 being exploited in the wild.
How severe is CVE-2026-58579?: Medium severity, with a CVSS score of 5.4, published 2 July 2026.
Which products and versions are affected?: InfiniFlow RAGFlow before 0.26.3.
Is there a fix for CVE-2026-58579?: A patch was published on 2026-07-01: Fix merged into main branch Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-58579 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-58579?: Check whether you run InfiniFlow RAGFlow at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stored cross-site scripting (XSS) vulnerability exists in RAGFlow versions prior to 0.26.3. The vulnerability stems from insufficient sanitization of agent pipeline (DSL) node names. While the backend 'normalize_dsl' function validates JSON serialization, it preserves node names verbatim. The frontend 'dataflow-result' UI subsequently renders these names in a "Rerun from current step" confirmation modal using 'dangerouslySetInnerHTML' with 'escapeValue: false' in the i18next configuration. An authenticated attacker can inject a malicious payload into a node name that executes when another user interacts with the rerun modal. The fix, introduced in version 0.26.3, implements DOMPurify sanitization on the interpolated HTML content before rendering.

Affected products

infiniflow RAGFlow before 0.26.3

Timeline

2026-06-30: disclosed: Issue reported on GitHub
2026-07-01: patched: Fix merged into main branch
2026-07-02: advisory: CVE published and version 0.26.3 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.