LightRAG <= 1.5.3 - Credentialed CORS Wildcard

LightRAG = 1.5.4 contains a broken access control vulnerability caused by default CORSORIGINS= with allowcredentials=True in lightragserver.py, letting malicious websites perform authenticated API requests, exploit requires authenticated user. id: CVE-2026-61736 info: name: LightRAG = 1.5.3 -...

lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

SummaryThe POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can submit unlimited password guesses at full network speed. Detailspython lightrag/api/lightragserver.py:[email protected]"/login"async def loginformdata: OAuth2PasswordRequestForm =...

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

SummaryThe LightRAG API server passes raw Python exception messages directly into HTTPerror responses across 30+ error handlers in every router. When combined withthe default unauthenticated configuration see companion report on CWE-306, anynetwork-reachable client can trigger exceptions whose ra...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85725 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85725 Source advisory: OSV:PYSEC-2026-4061...

PYSEC-2026-4061 lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

Summary When plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Details python lightrag/api/passwords.py:13-26 def...

PYSEC-2026-4064 lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

SummaryWhen plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Detailspython lightrag/api/passwords.py:13-26def...

lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

SummaryThe LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown isconfigured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizerrehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derivedfrom user-ingested documents...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-86062 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-86062 Source advisory: OSV:PYSEC-2026-4065...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85709 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85709 Source advisory: OSV:PYSEC-2026-4063...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85740 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85740 Source advisory: OSV:PYSEC-2026-4064...

PYSEC-2026-4062 lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

Summary The POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can submit unlimited password guesses at full network speed. Details python lightrag/api/lightragserver.py:2161 @app.post"/login" async def loginformdata: OAuth2PasswordRequestForm =...

PYSEC-2026-4065 lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...

lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

SummaryLightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85734 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85734 Source advisory: OSV:PYSEC-2026-4062...

PYSEC-2026-4063 lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...

PT-2026-105820

Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validated addresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not is global. That check is...

PT-2026-105819

Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...

PT-2026-105817

Summary When plaintext passwords are stored in AUTH ACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Details python lightrag/api/passwords.py:13-26 def...

PT-2026-105821

Summary The LightRAG WebUI renders assistant/answer chat content as raw HTML — react-markdown is configured with rehypePlugins=rehypeRaw and skipHtml=false and no HTML sanitizer rehype-sanitize, element allow-list, or custom urlTransform. Because answer content is derived from user-ingested...