CVE-2026-49951

RAGFlow model-provider setup can reach internal services

InfiniFlow · RAGFlow model-provider setup

First documented disclosure · Review checkpoint

Summary

Provider URL validation allows unauthorized outbound requests.

Severity and exploitation evidence

Medium · 5.3/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed public sources describe the vulnerability and its conditions. Malicious exploitation has not been established in the reviewed sources.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Model-provider setup accepted a destination without enforcing the service’s outbound network policy.

Conditions required

An authenticated RAGFlow user must be able to submit model-provider configuration.

Potential impact

The server can contact private services and reveal internal service information through returned errors.

Affected versions and configurations

Before 0.27.0.

Fix and mitigation status

0.27.0 per CNA.

Practical next steps

Move to 0.27.0 or later and limit access to model-provider configuration and outbound networks.

Operating lesson

Treat provider setup and connection tests as privileged network operations.

Evidence and limits

VulnCheck gives July 31 as the public date and 0.27.0 as the fix boundary. The cited maintainer change addresses outbound request handling.

Sources