High · published January 1, 2026
🚨 A low-privileged user can unleash chaos with a single command! In RAGFlow versions prior to 0.23.0, an authenticated account can execute arbitrary system commands through the Canvas CodeExec component, bypassing sandbox isolation entirely! 🔥 Think of it like a mischievous kitchen staff member who manages to sneak into the chef's domain and starts cooking whatever they want, regardless of the restaurant's menu. This lack of oversight allows for complete chaos in the kitchen! An attacker could execute any command on the server, potentially leading to data theft, system corruption, or even taking complete control of the server. This vulnerability opens the door not just to isolated incidents, but to a full-scale kitchen nightmare where sensitive data could be compromised, and the entire operation is at risk!
Think of it like a mischievous kitchen staff member who manages to sneak into the chef's domain and starts cooking whatever they want, regardless of the restaurant's menu. This lack of oversight allows for complete chaos in the kitchen! This vulnerability in RAGFlow allows low-privileged authenticated users to execute arbitrary commands by exploiting the Canvas CodeExec component, which uses eval() on untrusted data without proper filtering or sandboxing. This flaw compromises the intended design and enables command injection.
An attacker could execute any command on the server, potentially leading to data theft, system corruption, or even taking complete control of the server. This vulnerability opens the door not just to isolated incidents, but to a full-scale kitchen nightmare where sensitive data could be compromised, and the entire operation is at risk! Upgrade to version 0.23.0 immediately to secure your system. Review your access controls and ensure that endpoints do not contain inverted permission logic. Regularly audit user permissions and monitor for unusual activity to prevent potential exploitation. You've got this! With these steps, you can safeguard your system and keep those mischievous users at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| infiniflow/ragflow | < 0.23.0 | 0.23.0 |