CVE-2026-58579: RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Name
RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalizedsl, which only performs JSON serialization validation and preserves the node name verbatim. The dataflow-result web UI then renders that name into the "Rerun from current step" confirmation modal via dangerouslySetInnerHTML, and the i18next configuration sets escapeValue:false, so the value is inserted into the DOM without HTML encoding. An authenticated workspace user who can create or edit an agent can inject arbitrary JavaScript that executes in the session of another workspace member who opens the dataflow result and clicks rerun, enabling session/token theft and account takeover across the user trust boundary.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RAGFlowto a version that resolves this vulnerability.Fixed in 0.26.3 - Configuration
Modify the dataflow-result UI so the agent pipeline node name shown in the "Rerun from current step" confirmation modal is rendered with proper escaping/sanitization (avoid inserting untrusted node name via dangerouslySetInnerHTML).
RAGFlow dataflow-result web UI (Rerun from current step confirmation modal) dangerouslySetInnerHTML usage / HTML encoding behavior = use sanitized/encoded rendering instead of dangerouslySetInnerHTML - Configuration
Set i18next configuration escapeValue to true so values are HTML-escaped before being inserted into the DOM.
RAGFlow i18next configuration escapeValue = true
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58579?
The severity of CVE-2026-58579 is medium with a score of 5.1.
What type of vulnerability is CVE-2026-58579?
CVE-2026-58579 is a stored Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2026-58579?
To fix CVE-2026-58579, upgrade RAGFlow to version 0.26.3 or later.
What software is affected by CVE-2026-58579?
RAGFlow versions prior to 0.26.3 are affected by CVE-2026-58579.
What impact does CVE-2026-58579 have on security?
CVE-2026-58579 allows an attacker to execute malicious scripts in the context of the user's browser through unvalidated node names.