CVE-2026-119337
Deferred Deferred - Pending Action

Information Disclosure in RAGFlow via Agent Access Bypass

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: GitHub, Inc.

Description
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes completion_openai and returns through the openai-compatible branch before UserCanvasService.accessible() checks whether the caller may access the requested agent. An authenticated user who knows another user's private agent UUID can execute that Only me workflow and read its output across the user or tenant boundary; configured tools may also cause side effects, but stronger impacts were not demonstrated. This issue is fixed in version 0.27.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-119337
EUVD
EUVD-2026-114444

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
infiniflow ragflow >= 0.25.2, < 0.27.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

RAGFlow is an open-source RAG engine. Between versions 0.25.2 and 0.27.3, an API endpoint (POST /api/v1/agents/chat/completions) allowed authenticated users to access private agents of other users by exploiting a missing access control check. This could let a user read outputs from another user's private agent, even across user or tenant boundaries.

Impact Analysis

If you use RAGFlow versions 0.25.2 to 0.27.2, an attacker with your credentials could access private agents you created, read their outputs, or trigger unintended side effects if tools were configured. This violates data confidentiality and integrity within the system.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data processed by private agents, potentially violating GDPR's data confidentiality requirements and HIPAA's access controls. Organizations using affected versions may face compliance risks due to insufficient access controls.

Mitigation Strategies

Upgrade RAGFlow to version 0.27.3 or later to address the vulnerability. Review user permissions and agent access controls to ensure proper isolation between users and tenants.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-119337. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart