infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/<doc_id>.

Published Oct 1, 2026 · Updated Oct 5, 2026 · Assigned by mitre