Critical · published January 27, 2026
🚨 A single malicious ZIP file is all it takes to turn your server into a hacker's playground! 😱 Think of your server as a multi-layered cake, and the MinerU parser as the chef. If the chef blindly adds layers from any box they receive, a bad ingredient can spoil the whole dessert – that’s what happens here when ZIP files aren’t checked properly! An attacker could overwrite any file on your server, leading to devastating consequences like remote code execution. Imagine the chaos if a cybercriminal could alter critical files or even take control of your entire system! This vulnerability poses an urgent risk to business continuity and data integrity.
Think of your server as a multi-layered cake, and the MinerU parser as the chef. If the chef blindly adds layers from any box they receive, a bad ingredient can spoil the whole dessert – that’s what happens here when ZIP files aren’t checked properly! CVE-2026-24770 exposes a "Zip Slip" vulnerability in the MinerU parser of RAGFlow, allowing attackers to overwrite arbitrary files due to improper filename sanitization during ZIP extraction.
An attacker could overwrite any file on your server, leading to devastating consequences like remote code execution. Imagine the chaos if a cybercriminal could alter critical files or even take control of your entire system! This vulnerability poses an urgent risk to business continuity and data integrity. Immediately patch to version 0.23.2 or later to close this critical gap. Review your extraction logic to ensure all filenames are properly sanitized, and consider implementing additional security measures for handling external ZIP files. You’ve got this! Follow these steps, and you’ll fortify your server against this dangerous vulnerability! 🛡️