CVE-2026-121928 in RAGFlow
Prediction
by VulDB Data Team • 11/04/2026
A vulnerability was identified in <a href="/product/infiniflow:ragflow">InfiniFlow RAGFlow up to 0.27.2</a>. This issue affects some unknown processing of the file <em>api/utils/file_utils.py</em> of the component <em>Images API</em>. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Upgrading to version 0.27.3 is capable of addressing this issue. The identifier of the patch is <em>9ea0246f8d453a144fb4f903d163b2ba6b91ed2c</em>. Upgrading the affected component is advised.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.