Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

hkuds/rag-anything

              main @ 32eef6e
            

Fixes

CVEs

HIGH

Peak severity

Highlights

Denial of Service: 3 prior fixes. Scrutinize any change in this area.

raganything/parser.py: most-fixed (2 issues). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Attackers can exploit unsanitized VLM query image paths to read arbitrary local system files via indirect prompt injection. This has been patched multiple times using path canonicalization and prefix verification.

Denial of Service: Unclosed PDF handles during PaddleOCR processing and orphaned temporary files during failed document downloads can exhaust system file descriptors and disk space, causing service unavailability.

Denial of Service: Concurrently transitioning the circuit breaker state to 'half-open' without thread-safe trial locks could lead to race conditions and inconsistent state handling during high-concurrency failure recoveries.