CVE-2026-58579— RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Name

RAGFlow < 0.26.3 - Stored Cross-Site Scripting via Agent Pipeline Node Name

RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize_dsl, which only performs JSON serialization validation and preserves the node name verbatim. The dataflow-result web UI then renders that name into the "Rerun from current step" confirmation modal via dangerouslySetInnerHTML, and the i18next configuration sets escapeValue:false, so the value is inserted into the DOM without HTML encoding. An authenticated workspace user who can create or edit an agent can inject arbitrary JavaScript that executes in the session of another workspace member who opens the dataflow result and clicks rerun, enabling session/token theft and account takeover across the user trust boundary.

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

InfiniFlow RAGFlow 跨站脚本漏洞

InfiniFlow RAGFlow是InfiniFlow组织开源的一个基于深度文档理解的开源 RAG 引擎。 InfiniFlow RAGFlow 0.26.3之前版本存在跨站脚本漏洞，该漏洞源于未对agent pipeline节点名称进行清理，导致攻击者可通过存储型跨站脚本攻击，在用户会话中注入任意JavaScript，从而窃取会话/令牌并实现账户接管。

N/A

N/A