7 matches found
EUVD-2026-91118
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/...
CVE-2026-51892
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/...
CVE-2026-51892
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/...
CVE-2026-51892
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/...
CVE-2026-51892
The software infiniflow ragflow version 0.24.0 is vulnerable to Incorrect Access Control via the /v1/document/get/ endpoint. This flaw allows for unauthorized access to documents. The vulnerability is associated with CWE-284 (Improper Access Control). While the CVSS v3.1 score indicates a Medium ...