CVE-2026-58579 Details
Description
RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize_dsl, which only performs JSON serialization validation and preserves the node name verbatim. The dataflow-result web UI then renders that name into the "Rerun from current step" confirmation modal via dangerouslySetInnerHTML, and the i18next configuration sets escapeValue:false, so the value is inserted into the DOM without HTML encoding. An authenticated workspace user who can create or edit an agent can inject arbitrary JavaScript that executes in the session of another workspace member who opens the dataflow result and clicks rerun, enabling session/token theft and account takeover across the user trust boundary.
A stored cross-site scripting vulnerability has been identified in RAGFlow versions prior to 0.26.3. The issue arises because the application stores agent pipeline node names without proper sanitization. When these names are rendered in the web UI, they are inserted into the DOM using 'dangerouslySetInnerHTML', which can execute arbitrary JavaScript. This vulnerability allows an authenticated user to inject scripts that run in the session of another user, potentially leading to session token theft and account takeover.
Users can update to RAGFlow version 0.26.3 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 2, 2026CISA-ADP
Assessed Jul 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/infiniflow/ragflow/commit/572f1ea9f4eba6a60e64f7437dee60aa1c0913f1 | [email protected] | Source CodeVendor |
| https://github.com/infiniflow/ragflow/issues/16507 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/infiniflow/ragflow/pull/16516 | [email protected] | Issue TrackingVendor |
| https://github.com/infiniflow/ragflow/releases/tag/v0.26.3 | [email protected] | Release NotesVendor |
| https://www.vulncheck.com/advisories/ragflow-stored-cross-site-scripting-via-agent-pipeline-node-name | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| RAGFlow | < 0.26.3 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | [email protected] |
| Jul 6, 2026 | CVE Modified | CISA-ADP |
| Jul 2, 2026 | New CVE Received | [email protected] |