Dearsishs

**Name of the Vulnerable Software and Affected Versions** RAGFlow versions prior to 0.26.3 **Description** A server-side request forgery (SSRF) issue exists in the agent workflow "Invoke" component located in `agent/component/invoke.py`. The component constructs outbound request URLs using canvas configuration and runtime template variables, then processes them via `requests.get`, `requests.post`, or `requests.put` without utilizing the `assert url is safe` validator or pinning the resolved address. This allows a user capable of creating or triggering an agent to force the server to fetch data from loopback, link-local, and RFC 1918 destinations, such as cloud instance metadata endpoints and services co-located on the deployment network. If an agent is configured to interpolate the chat query into the Invoke URL, the destination can be controlled by any user sending that query. **Recommendations** Update RAGFlow to version 0.26.3 or later.