CVE-2026-51892

EUVD-2026-91118
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/<doc_id>.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
References
https://gist.github.com/Ro1ME/00684720b33e37b2dd39856d6c226468
https://github.com/infiniflow/ragflow/issues/14618
https://github.com/infiniflow/ragflow/issues/15267