PYSEC-2026-4062 lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

Summary The POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can submit unlimited password guesses at full network speed. Details python lightrag/api/lightragserver.py:2161 @app.post"/login" async def loginformdata: OAuth2PasswordRequestForm =...

lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

SummaryLightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...

PYSEC-2026-4061 lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

Summary When plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Details python lightrag/api/passwords.py:13-26 def...

lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

SummaryThe POST /login endpoint has no rate limiting, account lockout, or delay on failed attempts. An attacker can submit unlimited password guesses at full network speed. Detailspython lightrag/api/lightragserver.py:[email protected]"/login"async def loginformdata: OAuth2PasswordRequestForm =...

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

SummaryWhen plaintext passwords are stored in AUTHACCOUNTS, the comparison uses Python's == operator which is not constant-time. An attacker with low-latency access can exploit timing differences to recover the password character by character. Detailspython lightrag/api/passwords.py:13-26def...

PYSEC-2026-4064 lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85709 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85709 Source advisory: OSV:PYSEC-2026-4063...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85725 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85725 Source advisory: OSV:PYSEC-2026-4061...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-86062 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-86062 Source advisory: OSV:PYSEC-2026-4065...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85734 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85734 Source advisory: OSV:PYSEC-2026-4062...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85740 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85740 Source advisory: OSV:PYSEC-2026-4064...

Cross-site Scripting (XSS)

Overview lightrag-hku is a LightRAG: Simple and Fast Retrieval-Augmented Generation Affected versions of this package are vulnerable to Cross-site Scripting XSS via the ChatMessage component, which renders chat answer and thinking content as raw HTML using react-markdown with rehypeRaw and...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-86062 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-86062 Source advisory: SNYK:PYTHON-LIGHTRAGHKU-21693623...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-86062 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-86062 Source advisory: GHSA-XPJQ-3W4W-W5WR...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-86062 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-86062 Source advisory: OSV:GHSA-XPJQ-3W4W-W5WR...

lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...

Server-side Request Forgery (SSRF)

Overview lightrag-hku is a LightRAG: Simple and Fast Retrieval-Augmented Generation Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the unwrapembeddedipv4 function in lightrag/parser/markdown/parser.py, where the RFC 8215 local-use NAT64 prefix...

GHSA-VV3M-F8X4-7377 lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

Summary LightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85740 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85740 Source advisory: SNYK:PYTHON-LIGHTRAGHKU-21693625...

context-graph-spaces (>=0.1.0, <=0.1.2), lightrag-memgraph (>=0.1.0, <=0.3.2) +5 more potentially affected by CVE-2026-85740 via lightrag-hku (>=1.4.7, <=1.5.4)

lightrag-hku PYPI version =1.4.7, =0.1.0, =0.1.0, =1.4.0, =0.1.0, =0.7.1 Source cves: CVE-2026-85740 Source advisory: OSV:GHSA-VV3M-F8X4-7377...