InfiniFlow RAGFlow: Incorrect access control in get_dataset endpoint
Summary
RAGFlow 0.24.0 contains an improper access control flaw in the get_dataset function of the evaluation API (api/apps/evaluation_app). According to the CVE record, an attacker may be able to reach data or functions they should not access, and depending on the exposed entry point, code or command execution may be possible. The CVE record and the public write-up do not confirm which entry point enables code execution, and the CVSS score of 9.8 reflects the worst-case assumption. The public write-up describes a scenario with two regular user accounts, so a logged-in low-privileged user may be sufficient, but this is not verified.
Affected
- RAGFlow 0.24.0 (per CVE record)
- Earlier versions: reported as 0.24.0 or earlier by a third-party write-up, not confirmed by the vendor
- Later versions: unknown
Fixed in
Unknown.
Workaround
- No vendor workaround documented for this endpoint.
- Do not expose RAGFlow directly to the internet; use a VPN or an authenticated reverse proxy.
- Limit user accounts to trusted users and review existing accounts.
Exploitation
- Not listed in CISA KEV; no confirmed in-the-wild exploitation known.
- CISA SSVC data lists exploitation as "poc" and automatable: yes, indicating a proof of concept exists.
- The reporter's gist is referenced; its contents could not be verified.
- Some sources (TheHackerWire) state no public PoC; this data appears outdated.
Our recommendation
- Check whether RAGFlow is in use and at which version, especially 0.24.0 or earlier.
- Restrict network access to RAGFlow to internal or VPN users; do not expose it to the internet.
- Review user accounts and remove unneeded ones.
- Monitor logs for unusual requests to evaluation and dataset endpoints.
- Watch the vendor's GitHub security advisories and apply a fix as soon as one is published.
- Priority is high if RAGFlow is internet-reachable or shared among users.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- CVE-2026-51897 gist by Ro1ME gist.github.com
- VulDB CVE-2026-51897 vuldb.com
- OpenCVE CVE-2026-51897 app.opencve.io
- HOL Guard CVE-2026-51897 (CISA ADP Vulnrichment) hol.org
- RAGFlow GitHub issue #15267 github.com
- RAGFlow GitHub security advisory GHSA-8xw3-v6c2-j84j github.com
- TheHackerWire CVE-2026-51897 www.thehackerwire.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 21:31.
Original description (NVD)
RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.