Summary

RAGFlow 0.13.0 suffers from improper access control in document-hooks.ts, allowing unauthorized access to user documents.

Affected products

Does this affect you?

Add your gear to cvedb and we'll alert you only when infiniflow ships something exploited.

References

• NVD entry
• CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.