Read the docs
TI-2024-11535 Aliases CVE-2024-12433GHSA-wr4v-pc76-3q4p

Remote Code Execution in infiniflow/ragflow

Priority HIGH 82CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

A vulnerability in infiniflow/ragflow versions v0.12.0 allows for remote code execution. The RPC server in RagFlow uses a hard-coded AuthKey 'authkey=b'infiniflow-token4kevinhu'' which can be easily fetched by attackers to join the group communication without restrictions. Additionally, the server processes incoming data using pickle deserialization via `pickle.loads()` on `connection.recv()`, making it vulnerable to remote code execution. This issue is fixed in version 0.14.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01692 77th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed infiniflow/ragflow (infiniflow): 0.14.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
infiniflowinfiniflow/ragflowbefore 0.14.00.14.0Patch availableCNA
  • infiniflow/ragflow Vendorinfiniflow Affected before 0.14.0 Fixed in 0.14.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:*0.12.0 to before 0.14.0Vulnerableinfiniflow
  • cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:* Versions 0.12.0 to before 0.14.0 Vulnerable ·infiniflow

Remediation

  • Fix · CNA infiniflow/ragflow (infiniflow) Fixed in 0.14.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    infiniflow/ragflow 0.14.0

    2 records Highest priority Priority HIGH 2 HIGH

    Other records, highest priority first

    • TI-2024-11552 RCE, Full Read SSRF, and Arbitrary File Read in infiniflow/ragflowPriority HIGH 75
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-12433
  2. 2026-10-03 Alias added: GHSA-wr4v-pc76-3q4p

References

Exploit 1

Patch 1

  • TI-2026-19971 RAGFlow Affected by Zip Slip Remote Code Execution (RCE) in MinerUParser CVSS 3.1CRITICAL 9.8
  • TI-2025-30545 Missing brute-force protection in infiniflow RAGFlow CVSS 3.1CRITICAL 9.8
  • TI-2025-42731 RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability CVSS 4.0HIGH 8.9
  • TI-2025-19992 RAGFlow SQL Injection vulnerability CVSS 4.0HIGH 8.9
  • TI-2024-11552 RCE, Full Read SSRF, and Arbitrary File Read in infiniflow/ragflow CVSS 3.1CRITICAL 9.8
  • TI-2026-22991 Improper input validation in infiniflow ragflow CVSS 4.0HIGH 8.7
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences