Read the docs
TI-2026-85122 Aliases CVE-2026-121928GHSA-8jq6-8g6v-g3cr

Cross-site scripting in InfiniFlow RAGFlow Images API

Priority LOW 23CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Cross-site scripting, Code execution
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-79 and CWE-94.

Summary

InfiniFlow RAGFlow up to 0.27.2 contains a cross-site scripting flaw in the Images API, in the file processing code of api/utils/file_utils.py. Improper neutralization of input (CWE-79) lets manipulated input lead to script execution in a web page. A remote attacker with low privileges can exploit it with some user interaction. A public exploit is available and might be used.

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

Description from the CNA

A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unknown processing of the file api/utils/file_utils.py of the component Images API. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Upgrading to version 0.27.3 is capable of addressing this issue. The identifier of the patch is 9ea0246f8d453a144fb4f903d163b2ba6b91ed2c. Upgrading the affected component is advised.

Why it matters now

EPSS 0.00208 10th percentileScored 2026-11-07
Fix Fixed RAGFlow (InfiniFlow): 0.27.3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
infiniflowRAGFlow0.27.0; 0.27.1; 0.27.20.27.3Patch availableCNA
  • RAGFlow Vendorinfiniflow Affected 0.27.0; 0.27.1; 0.27.2 Fixed in 0.27.3 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:*——infiniflow
  • cpe:2.3:a:infiniflow:ragflow:*:*:*:*:*:*:*:* Versions — — ·infiniflow

Remediation

Upgrade InfiniFlow RAGFlow to version 0.27.3, which fixes the issue (patch 9ea0246f8d453a144fb4f903d163b2ba6b91ed2c).

Written with Claude Haiku 5.5 from the sources below · 2026-11-04

  • Fix · CNA RAGFlow (InfiniFlow) Fixed in 0.27.3

Timeline

  1. 2026-11-04 Threatist record created from CVE-2026-121928
  2. 2026-11-04 Alias added: GHSA-8jq6-8g6v-g3cr

References

Patch 3

Other 1

  • TI-2026-19971 RAGFlow Affected by Zip Slip Remote Code Execution (RCE) in MinerUParser CVSS 3.1CRITICAL 9.8
  • TI-2025-30545 Missing brute-force protection in infiniflow RAGFlow CVSS 3.1CRITICAL 9.8
  • TI-2024-11535 Remote Code Execution in infiniflow/ragflow CVSS 3.0CRITICAL 9.8
  • TI-2025-42731 RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability CVSS 4.0HIGH 8.9
  • TI-2025-19992 RAGFlow SQL Injection vulnerability CVSS 4.0HIGH 8.9
  • TI-2026-33111 RAGFlow: Server-Side Template Injection in Prompt Generator leads to Remote Code Execution CVSS 3.1CRITICAL 9.9
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences