infiniflow RAGFlow: Incorrect access control in trace_mindmap
Summary
RAGFlow 0.24.0 has an incorrect access control flaw in the trace_mindmap function. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without verifying owner, tenant, workspace, or membership. An attacker who can reach the application may be able to read data belonging to other users or tenants. A public reference exists, and the CVSS base score is 9.8 (critical); the authentication requirement is not confirmed by primary sources.
Affected
- infiniflow RAGFlow 0.24.0 (only version named in the CVE record)
- Other versions: Unknown.
Fixed in
- Unknown. No vendor advisory or patch was found for this CVE at the time of research.
Workaround
- Remove public exposure of RAGFlow; place it behind a VPN or zero-trust access layer and restrict access to known networks or users.
- Deny external access to the trace_mindmap path at the reverse proxy, after testing, as the route name is unverified.
- Require authentication in front of the whole application (SSO or proxy authentication).
- Keep sensitive knowledge bases out of shared or multi-tenant instances until a fix is confirmed.
Exploitation
- CISA SSVC data in the CVE record: Exploitation "poc", Automatable: yes.
- A public reference (GitHub gist) is listed; its content could not be verified.
- Not listed in the CISA KEV catalog at the time of research.
Our recommendation
- Inventory all RAGFlow instances and their versions, and check whether they are internet-facing.
- Restrict exposure immediately as described under workarounds; treat internet-facing or multi-tenant instances as high priority.
- Do not assume that upgrading fixes the issue; verify against vendor fix notes first.
- Review logs for requests to mindmap or trace endpoints and for cross-user data access.
- Monitor the vendor's GitHub security advisories and the NVD entry for a fix.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- CVE-2026-51893 reference gist gist.github.com
- VulDB CVE-2026-51893 vuldb.com
- OpenCVE CVE-2026-51893 app.opencve.io
- HOL Guard CVE-2026-51893 CISA ADP hol.org
- TheHackerWire CVE-2026-51893 www.thehackerwire.com
- Strix CVE-2026-51893 www.strix.ai
- RAGFlow GitHub issue 20324 github.com
- RAGFlow GitHub security advisory GHSA-8xw3-v6c2-j84j github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 21:32.
Original description (NVD)
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap. An externally reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.