CVE-2026-93013: RAGFlow through 0.27.2 Tenant Import Endpoints Path Traversal
RAGFlow through 0.27.2 contains a path traversal vulnerability in the devinsertchunksfromfile and devinsertmetadatafromfile endpoints that allows authenticated attackers to read arbitrary files by supplying absolute file paths in the filepath parameter. Attackers with valid access tokens can exploit missing path validation to read any file accessible to the service, with disclosure limited to files matching expected JSON structures that are then written to datasets.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs a valid access token and access to the affected tenant import endpoints. It is not exploitable by an unauthenticated remote attacker based on the provided information.
What data could be exposed?
The attacker can request absolute paths and read files that are accessible to the RAGFlow service process. Disclosure is limited to files matching the expected JSON structures that the endpoints process and write into datasets.
Does this vulnerability allow modification or deletion of files?
The reported impact is limited to information disclosure. The supplied severity vector indicates no integrity or availability impact.