CVE-2026-129158: ragent 1.1.0 Stored XSS via SVG Knowledge-Base Document Upload
ragent 1.1.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading SVG knowledge-base documents served inline as image/svg+xml. Attackers can upload a script-bearing SVG via /knowledge-base/{kb-id}/docs/upload so that victims opening /knowledge-base/docs/{docId}/file execute it in the application origin, enabling account takeover.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue and what interaction is required?
An authenticated user who can upload a knowledge-base document can submit a script-bearing SVG through the document-upload endpoint. A victim must then open the uploaded document's file URL for the script to execute.
Which deployments are exposed by default?
The affected behavior is present in ragent 1.1.0 when uploaded SVG knowledge-base documents are served inline with the image/svg+xml content type. The provided data does not identify any configuration setting that disables this behavior.
What is the impact if a victim opens a malicious SVG?
The SVG script executes in the application's origin. This can enable account takeover and may affect confidentiality and integrity within the victim's application session.
How can I determine whether malicious uploads are already present?
Review knowledge-base document uploads, particularly SVG files, and inspect documents served from /knowledge-base/docs/{docId}/file. Script-bearing SVG content and uploads associated with untrusted authenticated users should be treated as suspicious.