CVE-2026-49951 Details
Description
RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force the server to issue requests to arbitrary internal or external endpoints by supplying an unvalidated base_url to the POST /v1/llm/set_api_key endpoint handled by set_api_key() in api/apps/llm_app.py. Attackers can exploit this flaw to probe shared-network services such as MySQL, Elasticsearch, Redis, MinIO, the Infinity vector database, and cloud metadata endpoints, with raw upstream exception text returned in the response leaking internal service details, open ports, and configuration fingerprints.
A server-side request forgery (SSRF) vulnerability has been identified in RAGFlow versions prior to 0.27.0. This vulnerability allows authenticated attackers to manipulate the server into making requests to arbitrary internal or external endpoints. The issue arises from an unvalidated 'base_url' parameter sent to the POST /v1/llm/set_api_key endpoint, which is processed by the 'set_api_key()' function in 'api/apps/llm_app.py'. Exploitation of this vulnerability enables attackers to probe services on the shared network, such as MySQL, Elasticsearch, Redis, MinIO, the Infinity vector database, and cloud metadata endpoints. The response from these probes includes raw exception texts that can leak internal service details, open ports, and configuration fingerprints.
Users are advised to update to RAGFlow version 0.27.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/infiniflow/ragflow/commit/b058229ab3a79cc2d61bc1724c2e120ce2ede46d | [email protected] | Source CodeVendor |
| https://github.com/infiniflow/ragflow/pull/17641 | [email protected] | Issue TrackingVendor |
| https://github.com/infiniflow/ragflow/releases#release-v0.27.0 | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/ragflow-ssrf-via-set-api-key-base-url-parameter | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| RAGFlow | < 0.27.0 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 6, 2026 | New CVE Received | [email protected] |