PT-2026-55291 · Infiniflow · Ragflow

George Chen · Publicado 2026-07-02 · Atualizado 2026-07-02 · CVE-2026-58579

Mitre

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize dsl, which only performs JSON serialization validation and preserves the node name verbatim. The dataflow-result web UI then renders that name into the "Rerun from current step" confirmation modal via dangerouslySetInnerHTML, and the i18next configuration sets escapeValue:false, so the value is inserted into the DOM without HTML encoding. An authenticated workspace user who can create or edit an agent can inject arbitrary JavaScript that executes in the session of another workspace member who opens the dataflow result and clicks rerun, enabling session/token theft and account takeover across the user trust boundary.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-58579

Produtos afetados

Ragflow

Referências · 6

• 🔥 https://github.com/infiniflow/ragflow/issues/16507 · Exploit
• https://github.com/infiniflow/ragflow/releases/tag/v0.26.3 · Nota
• https://github.com/infiniflow/ragflow/commit/572f1ea9f4eba6a60e64f7437dee60aa1c0913f1 · Correção
• https://github.com/infiniflow/ragflow/pull/16516 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-58579 · Nota de Segurança
• https://vulncheck.com/advisories/ragflow-stored-cross-site-scripting-via-agent-pipeline-node-name · Nota