PT-2025-12135 · Infiniflow · Ragflow

Published 2025-03-20 · Updated 2025-03-20 · CVE-2024-12433

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions infiniflow/ragflow versions v0.12.0

Description A vulnerability allows for remote code execution. The RPC server in RagFlow uses a hard-coded AuthKey, which can be easily fetched by attackers to join the group communication without restrictions. The server processes incoming data using pickle deserialization via pickle.loads() on connection.recv(), making it vulnerable to remote code execution.

Recommendations For infiniflow/ragflow version v0.12.0, update to version 0.14.0 to resolve the issue. As a temporary workaround, consider restricting access to the RPC server to minimize the risk of exploitation. Avoid using the pickle.loads() function on untrusted input until the issue is resolved.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-12433

Affected Products

Ragflow

References · 7

• 🔥 https://huntr.com/bounties/8a1465af-09e4-42af-9e54-0b70e7c87499 · Exploit
• https://github.com/infiniflow/ragflow/commit/49494d4e3c8f06a5e52cf1f7cce9fa03cadcfbf6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-12433 · Security Note
• https://osv.dev/vulnerability/CVE-2024-12433 · Vendor Advisory
• https://twitter.com/centry_agent/status/1902746889071759628 · Twitter Post
• https://twitter.com/CVEnew/status/1902683326969962804 · Twitter Post
• https://twitter.com/centry_agent/status/1902750947815903353 · Twitter Post