← Vulnerability feed

Vulnerability record · CVE-2026-28797 · published 3 April 2026

CVE-2026-28797: Infiniflow ragflow improper input validation vulnerability

Infiniflow · Ragflow

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerability exists in RAGFlow's Agent workflow Text Processing (StringTransform) and Message components. These components use Python's jinja2.Template (unsandboxed) to render user-supplied templates, allowing any authenticated user to execute arbitrary operating system commands on the server. At time of publication, there are no publicly available patches.

8.7 CVSS 4.0 High EPSS 0.56% · top 55.7% CWE-20 · Improper input validationCWE-78 · OS command injection
8.7CVSS 4.0 base score
0.56%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References, 1 tagged exploit
24 Jul 2026Last modified by NVD

Description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerability exists in RAGFlow's Agent workflow Text Processing (StringTransform) and Message components. These components use Python's jinja2.Template (unsandboxed) to render user-supplied templates, allowing any authenticated user to execute arbitrary operating system commands on the server. At time of publication, there are no publicly available patches.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/infiniflow/ragflow/security/advisories/GHSA-vvwj-fvwh-4whx ExploitMitigationVendor Advisory

Track CVE-2026-28797 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-24770Infiniflow ragflow path traversal vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser contains a …EPSS 1.4%9.8CVE-2025-48187Infiniflow ragflow improper restriction of authentication attempts vulnerabilityRAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against email verification codes to p…EPSS 0.54%9.8CVE-2024-12433Infiniflow ragflow deserialization of untrusted data vulnerabilityA vulnerability in infiniflow/ragflow versions v0.12.0 allows for remote code execution. The RPC server in RagFlow uses a hard-coded AuthKey 'authkey…EPSS 1.7%9.8CVE-2024-12450Infiniflow ragflow server-side request forgery (ssrf) vulnerabilityIn infiniflow/ragflow versions 0.12.0, the `web_crawl` function in `document_app.py` contains multiple vulnerabilities. The function does not filter …EPSS 1.3%8.9CVE-2025-69286Infiniflow ragflow vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm i…EPSS 0.79%8.9CVE-2025-27135Infiniflow ragflow sql injection vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL componen…EPSS 0.62%8.8CVE-2024-10131Infiniflow ragflow code injection vulnerabilityThe `add_llm` function in `llm_app.py` in infiniflow/ragflow version 0.11.0 contains a remote code execution (RCE) vulnerability. The function uses u…EPSS 1.1%8.6CVE-2025-68700Infiniflow ragflow os command injection vulnerabilityRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged authenticated user (normal login…EPSS 0.72%

Source: NIST National Vulnerability Database (record CVE-2026-28797), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.