CVE-2026-49951

MEDIUM 6.3

RAGFlow < 0.27.0 SSRF via set_api_key base_url Parameter

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force the server to issue requests to arbitrary internal or external endpoints by supplying an unvalidated base_url to the POST /v1/llm/set_api_key endpoint handled by set_api_key() in api/apps/llm_app.py. Attackers can exploit this flaw to probe shared-network services such as MySQL, Elasticsearch, Redis, MinIO, the Infinity vector database, and cloud metadata endpoints, with raw upstream exception text returned in the response leaking internal service details, open ports, and configuration fingerprints.

CWE	CWE-918
Vendor	infiniflow
Product	ragflow
Published	Nov 6, 2026

Stay Ahead of the Next One

Get instant alerts for infiniflow ragflow

Be the first to know when new medium vulnerabilities affecting infiniflow ragflow are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Affected Versions

infiniflow / ragflow

0 < 0.27.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/infiniflow/ragflow/releases#release-v0.27.0 github.com: https://github.com/infiniflow/ragflow/pull/17641 github.com: https://github.com/infiniflow/ragflow/commit/b058229ab3a79cc2d61bc1724c2e120ce2ede46d vulncheck.com: https://www.vulncheck.com/advisories/ragflow-ssrf-via-set-api-key-base-url-parameter

Credits

Sheer Galor