PT-2026-96824

Name of the Vulnerable Software and Affected Versions LightRAG versions prior to 1.5.5 Description When plaintext passwords are stored in AUTH ACCOUNTS, the verify password function in lightrag/api/passwords.py uses the Python == operator for comparison. This operator is not constant-time and...