Skip to content
OpenAdvisories

Product · HKUDS

LightRAG

10 known vulnerabilities.

LightRAG at a glance

Last 12 months
9
Critical · all time
4
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities, 2 critical August 2026: 1 vulnerability, 1 critical September 2026: 5 vulnerabilities, 1 critical Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202651
Aug 202611
Jul 202622
Jun 202600
May 202600
Apr 202610
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202510
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 6.1
    CVE-2026-86062

    LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An atta…

    HKUDS LightRAG lightrag-hku PyPI
  • High 7.1
    CVE-2026-85740

    LightRAG: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, _validated_addresses in lightrag/parser/markdown/parser.py evaluates the literal resolved address with ipaddress.is_global without consistently classifying an IPv4 address embed…

    HKUDS LightRAG lightrag-hku PyPI
  • Critical 9.1
    CVE-2026-85734

    LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightrag_server.py does not impose a rate limit, account lockout, delay, or counter for failed authentication attempts. A network attack…

    HKUDS LightRAG lightrag-hku PyPI
  • Medium 5.9
    CVE-2026-85725

    LightRAG: Plaintext Passwords Compared Without Constant-Time Function

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, verify_password in lightrag/api/passwords.py compares plaintext AUTH_ACCOUNTS password values with Python's == operator. The comparison can return after the first mismatching by…

    HKUDS LightRAG lightrag-hku PyPI
  • Medium 5.3
    CVE-2026-85709

    LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in document_routes.py, graph_routes.py, query_routes.py, ollama_api.py, and lightrag_server.py. The…

    HKUDS LightRAG lightrag-hku PyPI
  • Critical 9.8
    CVE-2026-61808 Scanner template

    LightRAG: Missing Authentication for Critical API Functions in Default Configuration

    LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document con…

    HKUDS LightRAG
  • Critical 9.3
    CVE-2026-61740

    LightRAG: Authentication bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, when LightRAG is deployed with LIGHTRAG_API_KEY set but AUTH_ACCOUNTS unset, X-API-Key protection can be bypassed because lightrag/api/auth.py falls back to a hardcoded DEFAULT_…

    HKUDS LightRAG lightrag-hku PyPI
  • Critical 9.3
    CVE-2026-61736 Scanner template

    LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defaults to CORS_ORIGINS=* combined with allow_credentials=True in lightrag/api/lightrag_server.py, causing Starlette CORSMiddleware to effectively whitelist every or…

    HKUDS LightRAG lightrag-hku PyPI
  • Medium 4.2
    CVE-2026-39413

    LightRAG has a JWT Algorithm Confusion Vulnerability in LightRAG API

    LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.4.14, the LightRAG API is vulnerable to a JWT algorithm confusion attack where an attacker can forge tokens by specifying 'alg': 'none' in the JWT header. Since the jwt.decode() call…

    HKUDS LightRAG lightrag-hku PyPI
  • Medium 5.3
    CVE-2025-6773

    HKUDS LightRAG File Upload document_routes.py upload_to_input_dir path traversal

    A vulnerability was found in HKUDS LightRAG up to 1.3.8. It has been declared as critical. Affected by this vulnerability is the function upload_to_input_dir of the file lightrag/api/routers/document_routes.py of the component File Upload. The manipulation of…

    HKUDS LightRAG lightrag-hku PyPI