The vulnerability of the ExeSQL component in the software-based RAG platform for question-answering interactions with RAGFlow documents allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ExeSQL component in the software-based RAG platform for question-answering interactions with RAGFlow relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity...