CVE-2026-121927

A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function accountget of the file common/datasource/seafileconnector.py of the component Seafile Connector. Such manipulation of the argument seafileurl leads to server-side request forgery. The attack...

CVE-2026-121927

A Server-Side Request Forgery (SSRF) vulnerability exists in InfiniFlow RAGFlow versions up to 0.27.3 . The flaw is located within the Seafile Connector component, specifically in the _account_get function of the common/data_source/seafile_connector.py file. An attacker can achieve remote executi...