# InfiniFlow RAGFlow vulnerabilities Source: https://junglewise.ai/threats/technologies/ragflow Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/ragflow.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 15 vulnerabilities in InfiniFlow RAGFlow: 1 in the last 7 days and 10 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-49951, was published on 6 November 2026. 4 vulnerabilities in the last four weeks, down 33% on the four before (6). ## Counts - Last 7 days: 1 - Last 30 days: 4 - Last 90 days: 10 - All time: 15 (2 critical, 0 exploited in the wild) ## About InfiniFlow RAGFlow RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding. ## Latest InfiniFlow RAGFlow vulnerabilities - [CVE-2026-49951: RAGFlow server-side request forgery in LLM API key endpoint](https://junglewise.ai/threats/cve-2026-49951-ragflow-before-0-27-0-contains-a-server-side-request-forgery) (medium, CVSS 6.3, published 6 Nov 2026) - [CVE-2026-121927: InfiniFlow RAGFlow server-side request forgery in Seafile Connector](https://junglewise.ai/threats/cve-2026-121927-a-vulnerability-has-been-found-in-infiniflow-ragflow-up-to-0-27) (medium, CVSS 6.3, published 4 Nov 2026) - [CVE-2026-121585: InfiniFlow RAGFlow authorization bypass in Text To SQL Retrieval](https://junglewise.ai/threats/cve-2026-121585-a-security-flaw-has-been-discovered-in-infiniflow-ragflow-up-to) (medium, CVSS 4.3, published 4 Nov 2026) - [CVE-2026-119337: RAGFlow authorization bypass in OpenAI-compatible agent completion](https://junglewise.ai/threats/cve-2026-119337-ragflow-is-an-open-source-rag-retrieval-augmented-generation) (high, CVSS 7.1, published 30 Oct 2026) - [CVE-2026-51897: RAGFlow improper access control in get_dataset API endpoint](https://junglewise.ai/threats/cve-2026-51897-ragflow-0-24-0-contains-improper-access-control-in-get-dataset) (info, published 1 Oct 2026) - [CVE-2026-51896: infiniflow RAGFlow improper access control in resume API](https://junglewise.ai/threats/cve-2026-51896-infiniflow-ragflow-0-25-3-contains-improper-access-control-in) (info, published 1 Oct 2026) - [CVE-2026-51895: Ragflow improper access control in metadata update](https://junglewise.ai/threats/cve-2026-51895-ragflow-0-24-0-and-prior-contains-improper-access-control-in) (medium, CVSS 6.5, published 1 Oct 2026) - [CVE-2026-51894: Infiniflow RAGFlow incorrect access control in run_mindmap](https://junglewise.ai/threats/cve-2026-51894-infiniflow-ragflow-0-24-0-is-vulnerable-to-incorrect-access) (medium, CVSS 6.5, published 1 Oct 2026) - [CVE-2026-51893: Infiniflow RAGFlow incorrect access control in trace_mindmap](https://junglewise.ai/threats/cve-2026-51893-infiniflow-ragflow-0-24-0-is-vulnerable-to-incorrect-access) (info, published 1 Oct 2026) - [CVE-2026-51892: infiniflow RAGFlow incorrect access control in document retrieval](https://junglewise.ai/threats/cve-2026-51892-infiniflow-ragflow-0-24-0-is-vulnerable-to-incorrect-access) (info, published 1 Oct 2026) - [CVE-2026-58579: infiniflow RAGFlow stored XSS in agent pipeline node name](https://junglewise.ai/threats/cve-2026-58579-infiniflow-ragflow-stored-xss-in-agent-pipeline-node-name) (medium, CVSS 5.4, published 2 Jul 2026) - [CVE-2026-45312: infiniflow RAGFlow Jinja2 template injection in prompt generator](https://junglewise.ai/threats/cve-2026-45312-infiniflow-ragflow-jinja2-template-injection-in-prompt-generator) (critical, CVSS 9.9, published 29 May 2026) - [CVE-2026-28797: Infiniflow RAGFlow SSTI in Agent workflow components](https://junglewise.ai/threats/cve-2026-28797-infiniflow-ragflow-ssti-in-agent-workflow-components) (high, CVSS 8.8, published 3 Apr 2026) - [CVE-2025-69286: RAGFlow insecure cryptographic key generation](https://junglewise.ai/threats/cve-2025-69286-ragflow-insecure-cryptographic-key-generation) (critical, CVSS 9.8, published 31 Dec 2025) - [CVE-2025-68700: RAGFlow remote code execution in CodeExec component](https://junglewise.ai/threats/cve-2025-68700-ragflow-remote-code-execution-in-codeexec-component) (high, CVSS 8.8, published 31 Dec 2025) ## Most severe InfiniFlow RAGFlow vulnerabilities - [CVE-2026-45312: infiniflow RAGFlow Jinja2 template injection in prompt generator](https://junglewise.ai/threats/cve-2026-45312-infiniflow-ragflow-jinja2-template-injection-in-prompt-generator) (critical, CVSS 9.9, published 29 May 2026) - [CVE-2025-69286: RAGFlow insecure cryptographic key generation](https://junglewise.ai/threats/cve-2025-69286-ragflow-insecure-cryptographic-key-generation) (critical, CVSS 9.8, published 31 Dec 2025) - [CVE-2025-68700: RAGFlow remote code execution in CodeExec component](https://junglewise.ai/threats/cve-2025-68700-ragflow-remote-code-execution-in-codeexec-component) (high, CVSS 8.8, published 31 Dec 2025) - [CVE-2026-28797: Infiniflow RAGFlow SSTI in Agent workflow components](https://junglewise.ai/threats/cve-2026-28797-infiniflow-ragflow-ssti-in-agent-workflow-components) (high, CVSS 8.8, published 3 Apr 2026) - [CVE-2026-119337: RAGFlow authorization bypass in OpenAI-compatible agent completion](https://junglewise.ai/threats/cve-2026-119337-ragflow-is-an-open-source-rag-retrieval-augmented-generation) (high, CVSS 7.1, published 30 Oct 2026) - [CVE-2026-51895: Ragflow improper access control in metadata update](https://junglewise.ai/threats/cve-2026-51895-ragflow-0-24-0-and-prior-contains-improper-access-control-in) (medium, CVSS 6.5, published 1 Oct 2026) - [CVE-2026-51894: Infiniflow RAGFlow incorrect access control in run_mindmap](https://junglewise.ai/threats/cve-2026-51894-infiniflow-ragflow-0-24-0-is-vulnerable-to-incorrect-access) (medium, CVSS 6.5, published 1 Oct 2026) - [CVE-2026-49951: RAGFlow server-side request forgery in LLM API key endpoint](https://junglewise.ai/threats/cve-2026-49951-ragflow-before-0-27-0-contains-a-server-side-request-forgery) (medium, CVSS 6.3, published 6 Nov 2026) - [CVE-2026-121927: InfiniFlow RAGFlow server-side request forgery in Seafile Connector](https://junglewise.ai/threats/cve-2026-121927-a-vulnerability-has-been-found-in-infiniflow-ragflow-up-to-0-27) (medium, CVSS 6.3, published 4 Nov 2026) - [CVE-2026-58579: infiniflow RAGFlow stored XSS in agent pipeline node name](https://junglewise.ai/threats/cve-2026-58579-infiniflow-ragflow-stored-xss-in-agent-pipeline-node-name) (medium, CVSS 5.4, published 2 Jul 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, down 33% on the four before (6). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 6 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 3 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "InfiniFlow RAGFlow vulnerabilities", https://junglewise.ai/threats/technologies/ragflow, 12 November 2026.