PT-2025-7904 · Ragflow · Ragflow

Agentsec · Published 2025-02-25 · Updated 2025-02-27 · CVE-2025-27135

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RAGFlow versions 0.15.1 and prior

Description RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query, making it vulnerable to SQL injection. As of the time of publication, no patched version is available.

Recommendations For versions 0.15.1 and prior, as a temporary workaround, consider restricting access to the ExeSQL component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-14507

CVE-2025-27135

GHSA-3GQJ-66QM-25JQ

Affected Products

Ragflow

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27135.json · Exploit
• 🔥 https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42 · Exploit
• 🔥 https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42?pvs=4 · Exploit
• https://github.com/infiniflow/ragflow/security/advisories/GHSA-3gqj-66qm-25jq · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14507 · Security Note
• https://osv.dev/vulnerability/CVE-2025-27135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27135 · Security Note
• https://github.com/infiniflow/ragflow/blob/v0.15.1/agent/component/exesql.py · Note
• https://twitter.com/cybercronai/status/1894972059165302817 · Twitter Post
• https://t.me/cvedetector/18902 · Telegram Post
• https://twitter.com/CVEnew/status/1894458766453870852 · Twitter Post
• https://twitter.com/CveFindCom/status/1894455554283548924 · Twitter Post