CVE-2026-129157

The software ragent versions 1.0.0 through 1.1.0 contains a missing authorization vulnerability in the RagTraceController component. This flaw allows any authenticated user to access and view RAG traces belonging to other users. By navigating the /rag/traces/runs and related node endpoints, an at...