Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
infiniflow/ragflow
main @ 5b0b86c
218
Fixes
16
CVEs
CRITICAL
Peak severity
32.4%
Coverage
Highlights
Auth Bypass: 72 prior fixes. Scrutinize any change in this area.
api/apps/sdk/session.py: most-fixed (7 issues). Treat as high-risk during review.
117 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Server-Side Template Injection: The use of standard unsandboxed Jinja2 template rendering allows authenticated users to achieve arbitrary OS command execution (CVE-2026-28797). Hardening requires migrating all template engines to Jinja2 SandboxedEnvironment.
Auth Bypass: Insecure token deserialization, predictable key generation via URLSafeTimedSerializer, and weak JWT validation checks allowed comprehensive authentication bypasses. Centralized authentication, dynamic secret keys, and strict token-format enforcement are required.
Code Execution: The extensive use of python's unsafe built-in `eval()` function inside image preprocessing and postprocessing operators exposes the parsing pipeline to arbitrary code execution. This must be replaced by safe parsing and explicit dictionary-based attribute mapping.