CVE-2025-27135: RAGFlow SQL Injection vulnerability
First published: Tue Feb 25 2025(Updated: )
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of publication, no patched version is available.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| RAGFlow | <0.15.1 | |
| RAGFlow | <=0.15.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/infiniflow/ragflow/security/advisories/GHSA-3gqj-66qm-25jq
- https://github.com/infiniflow/ragflow/blob/v0.15.1/agent/component/exesql.py
- https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42?pvs=4
- https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42
Frequently Asked Questions
What is the severity of CVE-2025-27135?
CVE-2025-27135 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-27135?
To mitigate CVE-2025-27135, upgrade RAGFlow to a version higher than 0.15.1 once a patched version is available.
What type of vulnerability is CVE-2025-27135?
CVE-2025-27135 is a SQL injection vulnerability affecting the ExeSQL component of RAGFlow.
Which versions of RAGFlow are affected by CVE-2025-27135?
Versions of RAGFlow up to and including 0.15.1 are affected by CVE-2025-27135.
What is the impact of CVE-2025-27135 on RAGFlow?
CVE-2025-27135 allows attackers to execute arbitrary SQL queries on the database, potentially compromising data integrity and security.
- agent/description
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/author
- agent/first-publish-date
- agent/source
- agent/guess-ai
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/ragflow
- canonical/ragflow
- vendor/infiniflow
- version/ragflow/0.15.1