What’s Vulnerable › Vulnerabilities

CVE-2025-27135: RAGFlow SQL Injection vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-02-25 · updated 2026-06-17
• Weakness: CWE-89

Description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. As of time of publication, no patched version is available.

Affected products

• infiniflow ragflow: through 0.15.1

References

• https://github.com/infiniflow/ragflow/blob/v0.15.1/agent/component/exesql.py
• https://github.com/infiniflow/ragflow/security/advisories/GHSA-3gqj-66qm-25jq
• https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42?pvs=4
• https://swizzky.notion.site/ragflow-exesql-150ca6df7c03806989cefde915cf8e42

Get alerted when CVE-2025-27135 or the next vulnerability affects your stack