Read the docs
TI-2026-58873 Aliases CVE-2026-86062GHSA-xpjq-3w4w-w5wr

LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

Priority MEDIUM 60CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-79.

Summary

LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, lightrag_webui/src/components/retrieval/ChatMessage.tsx renders answer and thinking content with react-markdown, rehypeRaw, and skipHtml=false without an HTML sanitizer. An attacker who can add a document can store raw HTML that is returned through the query path and rendered as active content by MessageMarkdown. A user who later retrieves the content can execute attacker-controlled JavaScript through elements such as an iframe srcdoc; the additional Mermaid securityLevel: loose rendering path also injects generated SVG through innerHTML. The script runs in the LightRAG WebUI origin and can read the API token in localStorage and perform API actions as the victim. This issue is fixed in version 1.5.5.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00338 27th percentileScored 2026-11-07
Fix Fixed LightRAG (HKUDS): 1.5.5lightrag-hku (PyPI): 1.5.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
HKUDSLightRAGbefore 1.5.51.5.5Patch availableCNA
—lightrag-hku (PyPI)before 1.5.51.5.5Patch availableGHSA-xpjq-3w4w-w5wr
  • LightRAG VendorHKUDS Affected before 1.5.5 Fixed in 1.5.5 Patch available CNA
  • lightrag-hku (PyPI) Vendor— Affected before 1.5.5 Fixed in 1.5.5 Patch available GHSA-xpjq-3w4w-w5wr

Remediation

  • Fix · CNA LightRAG (HKUDS) Fixed in 1.5.5
  • Fix · GHSA-xpjq-3w4w-w5wr lightrag-hku (PyPI) Fixed in 1.5.5 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-86062
  2. 2026-10-03 Alias added: GHSA-xpjq-3w4w-w5wr

References

Advisory 1

Other 5

  • TI-2026-44237 LightRAG: Missing Authentication for Critical API Functions in Default Configuration CVSS 3.1CRITICAL 9.8
  • TI-2026-78721 Missing authentication in HKUDS Vibe-Trading FastAPI server enables RCE CVSS 4.0CRITICAL 9.3
  • TI-2026-44184 Improper authentication in HKUDS LightRAG CVSS 4.0CRITICAL 9.3
  • TI-2026-26034 Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling CVSS 4.0HIGH 8.9
  • TI-2026-62432 HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool CVSS 4.0CRITICAL 9.2
  • TI-2026-25310 DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py CVSS 4.0HIGH 8.7
See all 47 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences