CVE-2026-119337: infiniflow ragflow: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes completionopenai and returns through the openai-compatible branch before UserCanvasService.accessible checks whether the caller may access the requested agen...