CVE-2026-75898

CVE-2026-75898 — RAGFlow Invoke 组件 SSRF RAGFlow 代理工作流 "Invoke" 组件中的服务端请求伪造（CWE-918），影响 0.26.3 之前的版本 。 | ---|--- CVE| CVE-2026-75898 CVSS| 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N 修复版本| v0.26.3 修复提交| c4fe68e, e16d1a0 问题引用| infiniflow/ragflow15425, 18280 安全公告| VulnCheck 根本原因 在 v0.26.2 的...

CVE-2026-75898

RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component agent/component/invoke.py. The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or...

EUVD-2026-60824

RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component agent/component/invoke.py. The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or...

CVE-2026-75898 RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component

RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component agent/component/invoke.py. The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or...