{"data":{"id":"15abedb6-7617-4c5c-918f-e1404e400117","title":"CVE-2026-119337: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. From 0.25.2 until 0.27.3, POST…","summary":"RAGFlow versions 0.25.2 through 0.27.3 call completion_openai in POST /api/v1/agents/chat/completions before UserCanvasService.accessible() checks access to the requested agent. An authenticated user who knows another user's private agent UUID can run that Only me workflow and read its output across user or tenant boundaries, and configured tools may cause side effects, though stronger impacts were not demonstrated.","solution":"Fixed in version 0.27.3.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-119337","publishedAt":"2026-10-30T20:17:08.447Z","cveId":"CVE-2026-119337","cweIds":["CWE-862"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["RAGFlow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"RAGFlow agent chat completions API bypasses access check on private agents","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-31T00:10:22.054Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-31T00:10:24.910Z","patchAvailable":null,"disclosureDate":"2026-10-30T20:17:08.447Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}