{"data":{"id":"4d1f032d-ce6f-4518-870c-6dfa46defa3e","title":"GHSA-xpjq-3w4w-w5wr: lightrag-hku: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content","summary":"The LightRAG WebUI renders assistant answer content as raw HTML, using react-markdown with rehypeRaw, skipHtml set to false, and no sanitizer or allow-list. Because answers are derived from ingested documents, an attacker who can add one document can store a payload that runs in the browser of any user who later retrieves it, such as an administrator. The source says this can lead to authentication token theft from localStorage and full API takeover, and no authentication is required in the default configuration.","solution":"Recommend trust: false for KaTeX. The source does not state a fix for the stored XSS itself.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-xpjq-3w4w-w5wr","publishedAt":"2026-09-22T20:40:27.000Z","cveId":"CVE-2026-86062","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["lightrag-hku@<= 1.5.4 (fixed: 1.5.5)"],"affectedPackageNames":["lightrag-hku"],"affectedPackageRefs":["pypi:lightrag-hku"],"affectedVendors":[],"affectedVendorsRaw":["LightRAG","react-markdown","rehype-raw","mermaid"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00338,"epssCheckedAt":"2026-11-09T12:10:45.644Z","kevDateAdded":null,"advisoryAliases":["GHSA-xpjq-3w4w-w5wr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-22T20:40:27.000Z","fixReleasedAt":"2026-07-31T12:08:28.786Z","daysToFix":-53,"fixCheckedAt":"2026-10-29T21:30:16.363Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"lightrag-hku","fixedVersion":"1.5.5","matchedVersion":"1.5.5","fixReleasedAt":"2026-07-31T12:08:28.786Z","daysToFix":-53,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:16.216Z"}]}}