CVE-2026-93013

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.27.3

Description Authenticated attackers can read arbitrary files by exploiting missing path validation. By providing absolute file paths in the file path parameter, users with valid access tokens can access any file the service has permissions to read. This issue affects the 'dev insert chunks from file' and 'dev insert metadata from file' endpoints. Disclosure is limited to files that match the expected JSON structures, which are subsequently written to datasets.

Recommendations Update RAGFlow to version 0.27.3 or later. As a temporary mitigation, restrict access to the 'dev insert chunks from file' and 'dev insert metadata from file' endpoints or avoid using the file path parameter with absolute paths.