Home

Description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated user to execute arbitrary OS commands on the server. Any normal user can register, create a Canvas workflow with a DuckDuckGo + LLM component chain, and trigger the SSTI.

PUBLISHED Reserved 2026-05-11 | Published 2026-05-29 | Updated 2026-06-02 | Assigner GitHub_M




CRITICAL: 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine

Product status

<= 0.24.0
affected

References

github.com/...agflow/security/advisories/GHSA-wpg4-h5g2-jxm6 exploit

github.com/...agflow/security/advisories/GHSA-wpg4-h5g2-jxm6

cve.org (CVE-2026-45312)

nvd.nist.gov (CVE-2026-45312)

Download JSON