Live › vulnerability › CVE-2026-121585
RAGFlow, an open-source retrieval-augmented generation platform, has a flaw in its Text-to-SQL retrieval code where manipulated tableName or kbIDs arguments bypass authorization. An attacker who can reach the service may read knowledge-base data they should not be able to access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 00:46 UTC. All times on this page are UTC.
Self-hosted RAGFlow up to 0.27.2 or 1.0.0-rc2 using the Infinity document engine (the flaw is in the Infinity engine's RunSQL, Text-to-SQL retrieval). The CVSS vector indicates a low-privilege account is needed, so the risk is a signed-in user reading knowledge bases they should not see. Instances with Elasticsearch as the engine or no untrusted users can likely skip it, but no vendor source confirms this.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ragflow | vendor | <= 0.27.2, <= 1.0.0-rc2 | – |
0.27.2 or 1.0.0-rc2 is in the affected range)No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in InfiniFlow RAGFlow up to 0.27.2/1.0.0-rc2. This impacts the function RunSQL of the file internal/engine/infinity/sql.go of the component Text To SQL Retrieval. The manipulation of the argument tableName/kbIDs results in authorization bypass. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
This page as .md · .json · in your agent: get_signal("CVE-2026-121585")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.