CVE-2026-28797: RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI) vulnerability exists in RAGFlow's Agent workflow Text Processing (StringTransform) and Message components. These components use Python's jinja2.Template (unsandboxed) to render user-supplied templates, allowing any authenticated user to execute arbitrary operating system commands on the server. At time of publication, there are no publicly available patches.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-28797?
CVE-2026-28797 has a high severity rating of 8.7 according to the CVSS score.
How do I fix CVE-2026-28797?
To mitigate CVE-2026-28797, update RAGFlow to version 0.25.0 or later, which addresses the Server-Side Template Injection vulnerability.
What components are affected by CVE-2026-28797?
CVE-2026-28797 affects the Text Processing (StringTransform) and Message components in RAGFlow.
What type of vulnerability is CVE-2026-28797?
CVE-2026-28797 is categorized as a Server-Side Template Injection (SSTI) vulnerability leading to Remote Code Execution (RCE).
Who is at risk from CVE-2026-28797?
Users of RAGFlow versions 0.24.0 and prior are at risk of exploitation from CVE-2026-28797.