CVE-2026-119337

The open-source RAG engine RAGFlow versions 0.25.2 through 0.27.3 is vulnerable to a missing authorization flaw (CWE-862). The POST /api/v1/agents/chat/completions endpoint invokes completion_openai and returns via the openai-compatible branch before the UserCanvasService.accessible() check can v...

CVE-2026-119337: infiniflow ragflow: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes completionopenai and returns through the openai-compatible branch before UserCanvasService.accessible checks whether the caller may access the requested agen...