CVE-2026-121585

InfiniFlow RAGFlow (up to versions 0.27.2/1.0.0-rc2) contains an authorization bypass vulnerability within the Text To SQL Retrieval component. The flaw exists in the RunSQL function located in internal/engine/infinity/sql.go, where an attacker can manipulate the tableName/kbIDs arguments. This v...