i
infiniflow
Security Risk Profile
54
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 21 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 19, 2024 to present
21
Total CVEs
13
Critical+High
0
Exploited
9
Unpatched
Threat Assessment
Avg CVSS
8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
9
Critical/High
Risk Level
54/100
medium
🆕 4Fresh (<7d)📈 4 in Last 30 Days
Severity Distribution
Critical
4High
9Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
XSS
3
2
Input Validation
2
3
OS Command Injection
2
4
Code Injection
2
5
SSRF
2
Most Affected Products
1. infiniflow ragflow27
2. RAGFlow RAGFlow6
3. open-source/RAGFlow1
4. RAGFlow1
5. github/RAGFlow1
Recent Vulnerabilities
See more →CVE-2026-51894
unknown
Oct 1, 2026🔧 No Patch
CVE-2026-51892
unknown
Oct 1, 2026🔧 No Patch
CVE-2026-51893
unknown
Oct 1, 2026🔧 No Patch
CVE-2026-51896
unknown
Oct 1, 2026🔧 No Patch
CVE-2026-28797
CVSS 8.7high
RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component
Apr 3, 2026🔧 No Patch
CVE-2026-24770
CVSS 9.8EPSS 1%critical
RAGFlow Affected by Zip Slip Remote Code Execution (RCE) in MinerUParser
Jan 27, 2026
CVE-2025-69286
CVSS 8.9high
RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability
Dec 31, 2025🔧 No Patch
CVE-2025-68700
CVSS 8.6high
RAGFlow Remote Code Execution Vulnerability
Dec 31, 2025🔧 No Patch
CVE-2025-51462
CVSS 6.1medium
Jul 22, 2025🔧 No Patch
CVE-2025-48187
CVSS 9.8EPSS 0%critical
May 17, 2025
Monitor infiniflow in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.