PT-2025-21792 · Ragflow · Ragflow

Published 2025-05-17 · Updated 2025-05-22 · CVE-2025-48187

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: RAGFlow versions 0.18.1 and earlier

Description: The issue allows account takeover due to the possibility of conducting successful brute-force attacks against email verification codes. This enables arbitrary account registration, login, and password reset. The codes are six digits and there is no rate limiting, making it easier for attackers to guess the codes.

Recommendations: For RAGFlow versions 0.18.1 and earlier, consider implementing rate limiting on email verification codes to prevent brute-force attacks until a patch is available. As a temporary workaround, restrict access to the email verification code feature to minimize the risk of exploitation.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-48187

Affected Products

Ragflow

References · 12

• 🔥 https://cnblogs.com/qiushuo/p/18881084 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-48187 · Security Note
• https://github.com/infiniflow/ragflow/commits/main · Patch
• https://osv.dev/vulnerability/CVE-2025-48187 · Vendor Advisory
• https://github.com/infiniflow/ragflow · Note
• https://twitter.com/cracbot/status/1925507034180452463 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1923732096591229068 · Twitter Post
• https://t.me/latest_high_impact_cve/2392 · Telegram Post
• https://twitter.com/CveFindCom/status/1923725789293363389 · Twitter Post
• https://t.me/cvenotify/122765 · Telegram Post
• https://t.me/cvetracker/24098 · Telegram Post
• https://twitter.com/CVEnew/status/1923805561457606997 · Twitter Post