CVE-2026-45312
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
RAGFlow 0.24.0 and earlier contain a Jinja2 template injection vulnerability in the prompt generator (rag/prompts/generator.py). This allows any authenticated user to execute arbitrary OS commands on the server.
Risk Assessment
An attacker can gain full control of the server, steal data, install malware, or disrupt service. The vulnerability is easy to exploit by a regular user.
Recommendation
Immediately upgrade RAGFlow to a version newer than 0.24.0 that includes the fix. Until then, restrict new user registration and Canvas workflow creation.
Original NVD description (English source)
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated user to execute arbitrary OS commands on the server. Any normal user can register, create a Canvas workflow with a DuckDuckGo + LLM component chain, and trigger the SSTI.