RAGFLOW · CVE-2026-121927 · AI agents & MCP
NO FIX YET
RAGFlow, an open-source retrieval-augmented generation platform, has a server-side request forgery flaw in its Seafile connector. An attacker who controls the seafile_url setting can make the server send requests to internal or external addresses of their choosing.
first public Nov 4, 2026 · 2 sources
Running Ragflow? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Self-hosted RAGFlow 0.27.0 to 0.27.3 where someone can create or edit a Seafile data source and set its seafile_url; the server then sends requests to that address, which could be an internal service. The Seafile connector was added as a data source in early 2026 (PR #12945) and is configured by a user with a Seafile API token, so it looks like an authenticated feature, not one open to anonymous callers; no source says whether it is on by default. Instances that do not use the Seafile data source can skip it.
Not affected if newer-version, no-seafile-connector
Who cares ai-rag, ragflow, seafile, self-hosted
Unknown from the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function _account_get of the file common/data_source/seafile_connector.py of the component Seafile Connector. Such manipulation of the argument seafile_url leads to server-side request forgery. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-121927") · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.