CVE-2026-58579

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.26.3

Description An authenticated workspace user with permissions to create or edit an agent can perform a stored cross-site scripting attack. The agent update endpoint uses the normalize dsl function, which validates JSON serialization but fails to sanitize the agent pipeline (DSL) node name. This unsanitized name is subsequently rendered in the dataflow-result web UI within the Rerun from current step confirmation modal using dangerouslySetInnerHTML. Because the i18next configuration has escapeValue set to false, the input is inserted into the DOM without HTML encoding. This allows the execution of arbitrary JavaScript in the session of another workspace member who views the dataflow result and triggers the rerun action, potentially leading to session or token theft and account takeover.

Recommendations Update RAGFlow to version 0.26.3 or later.