CVE-2025-27135

EUVD-2025-5395
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of publication, no patched version is available.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
infiniflowragflow
𝑥
≤ 0.15.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/infiniflow/ragflow/blob/v0.15.1/agent/component/exesql.py
https://github.com/infiniflow/ragflow/security/advisories/GHSA-3gqj-66qm-25jq
https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42?pvs=4
https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42