CVE-2025-51462

Description

References

• infiniflow/ragflow · Product
• infiniflow/ragflow#7250 · Exploit
• gecko.security/blog/cve-2025-51462 · Exploit

Autres vulnérabilités de ragflow

• CVE-2026-28797ÉLEVÉE 8.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI)…
• CVE-2026-24770CRITIQUE 9.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser co…
• CVE-2025-69286CRITIQUE 9.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation al…
• CVE-2025-68700ÉLEVÉE 8.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged authenticated user (nor…
• CVE-2025-48187CRITIQUE 9.8RAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against email verification c…