CVE-2026-75898

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.26.3

Description A server-side request forgery (SSRF) issue exists in the agent workflow "Invoke" component located in agent/component/invoke.py. The component constructs outbound request URLs using canvas configuration and runtime template variables, then processes them via requests.get, requests.post, or requests.put without utilizing the assert url is safe validator or pinning the resolved address. This allows a user capable of creating or triggering an agent to force the server to fetch data from loopback, link-local, and RFC 1918 destinations, such as cloud instance metadata endpoints and services co-located on the deployment network. If an agent is configured to interpolate the chat query into the Invoke URL, the destination can be controlled by any user sending that query.

Recommendations Update RAGFlow to version 0.26.3 or later.