CVE-2026-51897

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-01

Last updated on: 2026-10-05

Assigner: MITRE

Description

RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-01

Last Modified

2026-10-05

Generated

2026-10-19

AI Q&A

2026-10-02

EPSS Evaluated

2026-10-18

NVD

CVE-2026-51897

EUVD

EUVD-2026-91113

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	n/a	n/a

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

RAGFlow 0.24.0 has improper access control in the get_dataset function within api/apps/evaluation_app. This flaw allows an attacker to execute attacker-controlled code or commands by exploiting the exposed entry point.

Detection Guidance

To detect this vulnerability, inspect RAGFlow 0.24.0 for improper access control in the get_dataset endpoint. Check API logs for unauthorized code or command execution attempts. Verify if the endpoint is exposed externally. No specific commands are provided in the context.

Impact Analysis

An attacker could gain unauthorized access to sensitive data, execute arbitrary commands on the system, or take control of the affected application. This may lead to data breaches, system compromise, or further network infiltration.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized data access or exposure. Organizations may face legal penalties, fines, or reputational damage if exploited.

Mitigation Strategies

Immediately upgrade RAGFlow to a patched version if available. If no patch exists, restrict network access to the vulnerable API endpoint and disable the affected functionality until a fix is applied.

Hi! I’m here to help you understand CVE-2026-51897. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70