117 matches found
LightRAG <= 1.5.3 - Credentialed CORS Wildcard
LightRAG = 1.5.4 contains a broken access control vulnerability caused by default CORSORIGINS= with allowcredentials=True in lightragserver.py, letting malicious websites perform authenticated API requests, exploit requires authenticated user. id: CVE-2026-61736 info: name: LightRAG = 1.5.3 -...
lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
SummaryLightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...
lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks
SummaryThe POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can submit unlimited password guesses at full network speed. Detailspython lightrag/api/lightragserver.py:[email protected]"/login"async def loginformdata: OAuth2PasswordRequestForm =...
lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses
SummaryThe LightRAG API server passes raw Python exception messages directly into HTTPerror responses across 30+ error handlers in every router. When combined withthe default unauthenticated configuration see companion report on CWE-306, anynetwork-reachable client can trigger exceptions whose ra...
lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
SummaryThe LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown isconfigured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizerrehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derivedfrom user-ingested documents...
lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function
SummaryWhen plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Detailspython lightrag/api/passwords.py:13-26def...
CVE-2026-85709
creationtimestamp| type| source ---|---|--- 2026-09-22 22:35:22+00:00| published-proof-of-concept| https://github.com/HKUDS/LightRAG/security/advisories/GHSA-hrmj-7rvj-4hg8 2026-09-23 11:32:02+00:00| seen| https://gist.github.com/alon710/74e359aa08359ada7f9cbef0f754a03e...
CVE-2026-85725
creationtimestamp| type| source ---|---|--- 2026-09-22 22:35:20+00:00| published-proof-of-concept| https://github.com/HKUDS/LightRAG/security/advisories/GHSA-c759-cx9p-mrwq 2026-09-23 10:32:03+00:00| seen| https://gist.github.com/alon710/0d3b32340b0e22813aee7b5053c88ded...
CVE-2026-85740
creationtimestamp| type| source ---|---|--- 2026-09-22 22:35:16+00:00| published-proof-of-concept| https://github.com/HKUDS/LightRAG/security/advisories/GHSA-vv3m-f8x4-7377 2026-09-23 10:06:23+00:00| seen| https://gist.github.com/alon710/7a56289e51a2a4574f7acda3d1a9a360...
CVE-2026-86062
creationtimestamp| type| source ---|---|--- 2026-09-22 22:35:14+00:00| published-proof-of-concept| https://github.com/HKUDS/LightRAG/security/advisories/GHSA-xpjq-3w4w-w5wr 2026-09-23 07:31:38+00:00| seen| https://gist.github.com/alon710/bf969bdec8772c71ac789467bc649eb3...
GHSA-XPJQ-3W4W-W5WR lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...
lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content
Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...
lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...
GHSA-VV3M-F8X4-7377 lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...
lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks
Summary The POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can submit unlimited password guesses at full network speed. Details python lightrag/api/lightragserver.py:2161 @app.post"/login" async def loginformdata: OAuth2PasswordRequestForm =...
GHSA-FRCH-4W6V-Q5XX lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks
Summary The POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can submit unlimited password guesses at full network speed. Details python lightrag/api/lightragserver.py:2161 @app.post"/login" async def loginformdata: OAuth2PasswordRequestForm =...
GHSA-C759-CX9P-MRWQ lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function
Summary When plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Details python lightrag/api/passwords.py:13-26 def...
lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function
Summary When plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Details python lightrag/api/passwords.py:13-26 def...
GHSA-HRMJ-7RVJ-4HG8 lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses
Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...
lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses
Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...