ragflow
v1.0.0RAGFlow is an agent-native database: a Retrieval-Augmented Generation (RAG) engine that grew into context infrastructure.
- Maintenance
- Active2843 commits in 3 months · bus factor 7
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 8 advisories5 critical, 3 high
- Supported versions
- No scheduleendoflife.date does not track this project
94.2k stars · 11.3k forks · 1.3k open issues · last release 9 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 8 most recent advisories published by the maintainers: 5 critical, 3 high. Check the patched version against the one you run.
- highCVE-2026-119337Oct 5, 2026OpenAI-compatible agent completion bypasses private canvas authorization
- Affected
- >= 0.25.2, <= 0.27.2
- criticalCVE-2026-45312May 9, 2026Server-Side Template Injection in Prompt Generator leads to Remote Code Execution
- Affected
- <=0.24.0
- criticalCVE-2026-28797Apr 1, 2026Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component
- Affected
- v0.24.0
- criticalCVE-2026-24770Jan 27, 2026[RF-01] Zip Slip Remote Code Execution (RCE) in MinerUParser
- Affected
- 0.23.1
- criticalCVE-2025-69286Dec 31, 2025Predictable Token Generation Leading to Authentication Bypass Vulnerability
- Affected
- < 0.20.5
- highCVE-2025-68700Dec 31, 2025RAGFlow Remote Code Execution Vulnerability
- Affected
- v0.22.0-31-g13e212c8 (and possibly earlier versions)
- criticalCVE-2025-27135Feb 25, 2025There is an SQL injection vulnerability in ragflow.
- Affected
- <= v0.15.1
- highCVE-2025-25282Feb 21, 2025Potential Insecure Direct Object Reference (IDOR) vulnerability in ragflow
- Affected
- v0.13.0
- Patched in
- v0.14.1