Skip to content
OpenAdvisories

Product · InfiniFlow

RAGFlow

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2026-121928

    InfiniFlow RAGFlow Images API file_utils.py cross site scripting

    A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unknown processing of the file api/utils/file_utils.py of the component Images API. The manipulation leads to cross site scripting. It is possible to initiate the attac…

    InfiniFlow RAGFlow