PT-2026-30249 · Ragflow · Ragflow

Wangyihang · CVE-2026-28797 · Published 2026-04-03 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.24.0

Description An issue exists in the Agent workflow Text Processing (StringTransform) and Message components. These components utilize an unsandboxed Python jinja2.Template to render templates provided by users. This allows an authenticated user to perform Server-Side Template Injection (SSTI), a technique where an attacker injects malicious code into a template that is then executed on the server, leading to the execution of arbitrary operating system commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the Text Processing (StringTransform) and Message components within the Agent workflow to minimize the risk of exploitation.

Exploit

OS Command Injection

Code Injection

RCE

Weakness Enumeration

CWE-78

CWE-1336

CWE-94

CWE-20

Related Identifiers

CVE-2026-28797

GHSA-VVWJ-FVWH-4WHX

Affected Products

Ragflow

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/28xxx/CVE-2026-28797.json · Exploit
• https://github.com/infiniflow/ragflow/security/advisories/GHSA-vvwj-fvwh-4whx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28797 · Security Note
• https://osv.dev/vulnerability/CVE-2026-28797 · Vendor Advisory
• https://t.me/cveNotify/222513 · Telegram Post