CVE-2025-27135— RAGFlow SQL Injection vulnerability
Quick assessment
Affected
infiniflow ragflow
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
RAGFlow是InfiniFlow开源的一个基于深度文档理解的开源 RAG 引擎。 RAGFlow 0.15.1版本及之前版本存在SQL注入漏洞，该漏洞源于ExeSQL组件从输入中提取 SQL 语句并将其直接发送到数据库查询。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-27135
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
RAGFlow SQL Injection vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of publication, no patched version is available.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
RAGFlow SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RAGFlow是InfiniFlow开源的一个基于深度文档理解的开源 RAG 引擎。 RAGFlow 0.15.1版本及之前版本存在SQL注入漏洞，该漏洞源于ExeSQL组件从输入中提取 SQL 语句并将其直接发送到数据库查询。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| infiniflow | ragflow | <= 0.15.1 | - |
|
II. Public POCs for CVE-2025-27135
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-27135
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-27135 (1)
Vendor Advisories for CVE-2025-27135 (1)
Security Blog Posts for CVE-2025-27135 (1)
-
ragflow-exesql x_refsource_MISC
IV. Related Vulnerabilities
Same product: ragflow
-
CVE-2026-93013
RAGFlow through 0.27.2 Tenant Import Endpoints Path Traversa -
CVE-2026-75898
RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Inv -
CVE-2026-58579
RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pip -
CVE-2026-45312
RAGFlow: Server-Side Template Injection in Prompt Generator -
CVE-2026-28797
RAGFlow: Server-Side Template Injection (SSTI) leading to Re
Same vendor: infiniflow
-
CVE-2026-93013
RAGFlow through 0.27.2 Tenant Import Endpoints Path Traversa -
CVE-2026-75898
RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Inv -
CVE-2026-58579
RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pip -
CVE-2026-45312
RAGFlow: Server-Side Template Injection in Prompt Generator -
CVE-2026-28797
RAGFlow: Server-Side Template Injection (SSTI) leading to Re
Same weakness: CWE-89
-
CVE-2026-63165
Omnispace Agora Project < 26.10.0 SQL Injection via sortEven -
CVE-2026-63152
Omnispace Agora Project < 26.10.0 Second-Order SQL Injection -
CVE-2026-63154
Omnispace Agora Project < 26.10.0 SQL Identifier Injection v -
CVE-2026-110083
Adobe Experience Manager | Improper Neutralization of Specia -
CVE-2026-88075
Configuration Manager Elevation of Privilege Vulnerability
V. Comments for CVE-2025-27135
No comments yet