CVE-2026-45312

Published: May 29, 2026Modified: Jul 21, 2026Deferred

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: security-advisories@github.com (Secondary)

Description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated user to execute arbitrary OS commands on the server. Any normal user can register, create a Canvas workflow with a DuckDuckGo + LLM component chain, and trigger the SSTI.

Related CWEs

CWE-1336

Improper Neutralization of Special Elements Used in a Template Engine

The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

References (2)

https://github.com/infiniflow/ragflow/security/advisories/GHSA-wpg4-h5g2-jxm6

Source: security-advisories@github.com

https://github.com/infiniflow/ragflow/security/advisories/GHSA-wpg4-h5g2-jxm6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.