LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-209.
Summary
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server returns raw Python exception text from error handlers in document_routes.py, graph_routes.py, query_routes.py, ollama_api.py, and lightrag_server.py. The detail=str(e), detail=str(exc), and equivalent formatted-message paths expose server filesystem paths, database host, port, user, and database names, language-model provider diagnostics, configuration details, and Python library internals to a network client that can trigger an error. The default unauthenticated configuration makes those responses reachable without credentials, and URI-configured backends can disclose connection strings containing credentials depending on the underlying driver error. This issue is fixed in version 1.5.5.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| HKUDS | LightRAG | before 1.5.5 | 1.5.5 | Patch available | CNA |
| — | lightrag-hku (PyPI) | before 1.5.5 | 1.5.5 | Patch available | GHSA-hrmj-7rvj-4hg8 |
- LightRAG VendorHKUDS Affected before 1.5.5 Fixed in 1.5.5 Patch available CNA
- lightrag-hku (PyPI) Vendor— Affected before 1.5.5 Fixed in 1.5.5 Patch available GHSA-hrmj-7rvj-4hg8
Remediation
- Fix · CNA LightRAG (HKUDS) Fixed in 1.5.5
- Fix · GHSA-hrmj-7rvj-4hg8 lightrag-hku (PyPI) Fixed in 1.5.5 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-85709
- 2026-10-03 Alias added: GHSA-hrmj-7rvj-4hg8
References
Other 6
- https://github.com/HKUDS/LightRAG/security/advisories/GHSA-hrmj-7rvj-4hg8
- https://github.com/HKUDS/LightRAG/pull/3422
- https://github.com/HKUDS/LightRAG/commit/4d90a0eb35d40b45f3a9045e308ec126897a3364
- https://github.com/HKUDS/LightRAG/commit/dcab315d7dc1eea682e9b2c4fcb1b06474484c47
- https://github.com/HKUDS/LightRAG/releases/tag/v1.5.5
- https://github.com/HKUDS/LightRAG
More HKUDS vulnerabilities
- TI-2026-44237 LightRAG: Missing Authentication for Critical API Functions in Default Configuration CVSS 3.1CRITICAL 9.8
- TI-2026-78721 Missing authentication in HKUDS Vibe-Trading FastAPI server enables RCE CVSS 4.0CRITICAL 9.3
- TI-2026-44184 Improper authentication in HKUDS LightRAG CVSS 4.0CRITICAL 9.3
- TI-2026-26034 Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling CVSS 4.0HIGH 8.9
- TI-2026-62432 HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool CVSS 4.0CRITICAL 9.2
- TI-2026-25310 DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py CVSS 4.0HIGH 8.7
Sources
- CVE-2026-85709 · CVE Program
- CVE-2026-85709 · NVD
- FIRST EPSS
- GHSA-hrmj-7rvj-4hg8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences