Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

RAGFlow v0.24.0 CWE-284: Broken Ownership Check in get_dataset Leads to Potential RCE (CVE-2026-51897)

gist.github.com 2026-10-02 查看中文 →

Referenced CVEs: CVE-2026-51897

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from gist.github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

InfiniFlow RagFlow 0.24.0 Improper Access Control via run_mindmap (CVE-2026-51894) 2026-10-02 Infiniflow RAGFlow CVE-2026-51893 Incorrect Access Control Vulnerability Advisory 2026-10-02 Langflow 1.8.4 Directory Traversal Vulnerability (CVE-2026-51888) POC 2026-10-02 Langchain-Chatchat 0.3.1 Path Traversal Vulnerability (CVE-2026-51884) Analysis and Fix 2026-10-02 Devika v1.0 Directory Traversal via save_code_to_project (CVE-2026-51873) 2026-10-02

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro