[ Vendor · 4 CVEs ]
InfiniFlow
CVEs affecting InfiniFlow published in the last 30 days, plus any InfiniFlow CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-121928 | 4 Nov 2026 | CVSS 3.5 | InfiniFlow RAGFlowA vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. This issue affects some unknown processing of the file api/utils/file_utils.py of… | |
| CVE-2026-121927 | 4 Nov 2026 | CVSS 6.3 | InfiniFlow RAGFlowA vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. Affected by this issue is the function _account_get of the file… | |
| CVE-2026-121585 | 4 Nov 2026 | CVSS 4.3 | InfiniFlow RAGFlowA security flaw has been discovered in InfiniFlow RAGFlow up to 0.27.2/1.0.0-rc2. This impacts the function RunSQL of the file… | |
| CVE-2026-119337 | 30 Oct 2026 | CVSS 7.1 | infiniflow ragflowRAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST /api/v1/agents/chat/completions invokes… |