agentprime: infiniflow-ragflowEvery new CVE for infiniflow-ragflow.https://agentprime.io/CVE-2026-121928: InfiniFlow RAGFlow Images API file_utils.py cross site scriptinghttps://agentprime.io/advisories/CVE-2026-121928/https://agentprime.io/advisories/CVE-2026-121928/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 18:00:30 GMTCVECVE-2026-121927: InfiniFlow RAGFlow Seafile Connector seafile_connector.py _account_get server-side request forgeryhttps://agentprime.io/advisories/CVE-2026-121927/https://agentprime.io/advisories/CVE-2026-121927/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 17:45:11 GMTCVECVE-2026-121585: InfiniFlow RAGFlow Text To SQL Retrieval sql.go RunSQL authorizationhttps://agentprime.io/advisories/CVE-2026-121585/https://agentprime.io/advisories/CVE-2026-121585/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:30:17 GMTCVECVE-2026-119337: RAGFlow: OpenAI-compatible agent completion bypasses private canvas authorizationhttps://agentprime.io/advisories/CVE-2026-119337/https://agentprime.io/advisories/CVE-2026-119337/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 20:10:27 GMTCVECVE-2026-93013: RAGFlow through 0.27.2 Tenant Import Endpoints Path Traversalhttps://agentprime.io/advisories/CVE-2026-93013/https://agentprime.io/advisories/CVE-2026-93013/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 15:16:51 GMTCVECVE-2026-75898: RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Componenthttps://agentprime.io/advisories/CVE-2026-75898/https://agentprime.io/advisories/CVE-2026-75898/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 14:24:06 GMTCVECVE-2026-58579: RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Namehttps://agentprime.io/advisories/CVE-2026-58579/https://agentprime.io/advisories/CVE-2026-58579/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Jul 2026 19:38:51 GMTCVECVE-2026-45312: RAGFlow: Server-Side Template Injection in Prompt Generator leads to Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-45312/https://agentprime.io/advisories/CVE-2026-45312/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 12:24:07 GMTCVEcriticalCVE-2026-28797: RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Componenthttps://agentprime.io/advisories/CVE-2026-28797/https://agentprime.io/advisories/CVE-2026-28797/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 21:41:54 GMTCVECVE-2026-24770: RAGFlow Affected by Zip Slip Remote Code Execution (RCE) in MinerUParserhttps://agentprime.io/advisories/CVE-2026-24770/https://agentprime.io/advisories/CVE-2026-24770/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 21:51:44 GMTCVEcriticalCVE-2025-69286: RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-69286/https://agentprime.io/advisories/CVE-2025-69286/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Dec 2025 21:52:54 GMTCVECVE-2025-68700: RAGFlow Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-68700/https://agentprime.io/advisories/CVE-2025-68700/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Dec 2025 21:17:40 GMTCVECVE-2025-48187: Unlimited authentication attempts in infiniflow RAGFlowhttps://agentprime.io/advisories/CVE-2025-48187/https://agentprime.io/advisories/CVE-2025-48187/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 May 2025 00:00:00 GMTCVEcriticalCVE-2024-12779: SSRF in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-12779/https://agentprime.io/advisories/CVE-2024-12779/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:28 GMTCVECVE-2024-12869: Improper Authentication in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-12869/https://agentprime.io/advisories/CVE-2024-12869/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:19 GMTCVECVE-2024-12871: Stored Cross-site Scripting (XSS) in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-12871/https://agentprime.io/advisories/CVE-2024-12871/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:07 GMTCVECVE-2024-12450: RCE, Full Read SSRF, and Arbitrary File Read in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-12450/https://agentprime.io/advisories/CVE-2024-12450/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:11:05 GMTCVECVE-2024-12870: Stored Cross-site Scripting (XSS) in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-12870/https://agentprime.io/advisories/CVE-2024-12870/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:45 GMTCVECVE-2024-12433: Remote Code Execution in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-12433/https://agentprime.io/advisories/CVE-2024-12433/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:10:08 GMTCVEcriticalCVE-2024-12880: Partial Account Takeover due to Insecure Data Querying in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-12880/https://agentprime.io/advisories/CVE-2024-12880/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Mar 2025 10:09:37 GMTCVECVE-2025-27135: RAGFlow SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2025-27135/https://agentprime.io/advisories/CVE-2025-27135/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 18:16:58 GMTCVECVE-2025-25282: Potential Insecure Direct Object Reference (IDOR) vulnerability in ragflowhttps://agentprime.io/advisories/CVE-2025-25282/https://agentprime.io/advisories/CVE-2025-25282/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Feb 2025 21:04:34 GMTCVECVE-2024-10131: Remote Code Execution in infiniflow/ragflowhttps://agentprime.io/advisories/CVE-2024-10131/https://agentprime.io/advisories/CVE-2024-10131/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Oct 2024 03:50:09 GMTCVE