Read the docs
TI-2025-42731 Aliases CVE-2025-69286

RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability

Priority HIGH 80CWE-340Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process allows these tokens to be mutually derivable. Specifically, both tokens are generated using the same `URLSafeTimedSerializer` with predictable inputs, enabling an unauthorized user who obtains the shared assistant/agent URL to derive the personal API key. This grants them full control over the assistant/agent owner's account. Version 0.22.0 fixes the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00797 56th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed ragflow (infiniflow): 0.22.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
infiniflowragflowbefore 0.22.00.22.0Patch availableCNA
  • ragflow Vendorinfiniflow Affected before 0.22.0 Fixed in 0.22.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:*before 0.22.0Vulnerableinfiniflow
  • cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:* Versions before 0.22.0 Vulnerable ·infiniflow

Remediation

  • Fix · CNA ragflow (infiniflow) Fixed in 0.22.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-69286

References

Exploit 1

Patch 1

Other 3

  • TI-2026-19971 RAGFlow Affected by Zip Slip Remote Code Execution (RCE) in MinerUParser CVSS 3.1CRITICAL 9.8
  • TI-2025-30545 Missing brute-force protection in infiniflow RAGFlow CVSS 3.1CRITICAL 9.8
  • TI-2024-11535 Remote Code Execution in infiniflow/ragflow CVSS 3.0CRITICAL 9.8
  • TI-2025-19992 RAGFlow SQL Injection vulnerability CVSS 4.0HIGH 8.9
  • TI-2024-11552 RCE, Full Read SSRF, and Arbitrary File Read in infiniflow/ragflow CVSS 3.1CRITICAL 9.8
  • TI-2026-22991 Improper input validation in infiniflow ragflow CVSS 4.0HIGH 8.7
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences