CVE-2026-45312: RAGFlow template injection in prompt generator allows OS command execution

Summary

CVE-2026-45312 affects RAGFlow, an open-source RAG engine, in version 0.24.0 and earlier. A Jinja2 template injection in the prompt generator (rag/prompts/generator.py) lets any authenticated user execute arbitrary OS commands on the server. Any normal user can register, create a Canvas workflow with a DuckDuckGo + LLM component chain, and trigger the flaw. The weakness is classified as CWE-1336.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Retrieval-augmented generation

Related items

• LowFBI arrests Saudi OpenAI employee who allegedly planted recording device in conference roomSimilar attack · CNBC Technology
• MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
• LowAnthropic warns self-replicating AI could spread to your smart devicesSimilar attack · BleepingComputer
• InfoAnthropic Warns Small AI Models Could Soon Form Self-Propagating IoT BotnetsSimilar attack · The Hacker News
• InfoAgent Baseline Publishes Security Reference Architecture for Software FactoriesSimilar attack · Socket Blog