CVE-2026-28797

CVE Enrichment

CVSS: 8.7 HIGH
EPSS: 0.58%
EPSS Percentile: 48.43%
CISA KEV: Not listed

Description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerability exists in RAGFlow's Agent workflow Text Processing (StringTransform) and Message components. These components use Python's jinja2.Template (unsandboxed) to render user-supplied templates, allowing any authenticated user to execute arbitrary operating system commands on the server. At time of publication, there are no publicly available patches.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 04-Apr-2026 05:16
Last Modified: 25-Jul-2026 05:10
EPSS Date: 2026-11-13
CWE: CWE-20, CWE-78, CWE-94, CWE-1336

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:L /
                            UI:N /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

CNA Products / Version Status

infiniflow · ragflow Source: CNA · [email protected]
Default status: unknown

<= 0.24.0 — affected

Affected Products / Versions

infiniflow / ragflow Source: NVD CPE · affected
Version / affected range: * · through (inclusive) 0.24.0
cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:*

References

[email protected]

Last enrichment sync: 14-Nov-2026 09:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

default administrator credentials, such as the LiteLLM default master key, CVE-2025-3248 (Langflow), CVE-2026-28797 (RAGFlow), an authentication bypass via the isCliRequest header in One API family systems, SSRF Amazon Details ARTEX AI-Agent Campaigns Targeting AI Credentials and Crypto KYC

CVE (1)

MITRE ATT&CK (9)

Vendors (1)

Products (10)

Tools (2)

Industries (1)

Countries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.