CVE-2025-68700

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged authenticated user (normal login account) can execute arbitrary system commands on the server host process via the frontend Canvas CodeExec component, completely bypassing sandbox isolation. This occurs because untrusted data (stdout) is parsed using eval() with no filtering or sandboxing. The intended design was to "automatically convert string results into Python objects," but this effectively executes attacker-controlled code. Additional endpoints lack access control or contain inverted permission logic, significantly expanding the attack surface and enabling chained exploitation. Version 0.23.0 contains a patch for the issue.

• CWE-78

• https://github.com/infiniflow/ragflow/commit/7a344a32f9f83529e12ca12f40f2657eb79fe811Patch
• https://github.com/infiniflow/ragflow/security/advisories/GHSA-8xw3-v6c2-j84jExploit, Vendor Advisory
• https://github.com/infiniflow/ragflow/security/advisories/GHSA-8xw3-v6c2-j84jExploit, Vendor Advisory

Published

Dec 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-68695Rejected reason: Not used
• CVE-2025-68696httparty is an API tool. In versions 0.23.2 and prior, httpa…8.2
• CVE-2025-68697n8n is an open source workflow automation platform. Prior to…5.4
• CVE-2025-68698Jervis is a library for Job DSL plugin scripts and shared Je…7.5
• CVE-2025-68699NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging …6.5
• CVE-2025-6870A vulnerability was found in SourceCodester Simple Company W…4.7
• CVE-2025-68701Jervis is a library for Job DSL plugin scripts and shared Je…7.5
• CVE-2025-68702Jervis is a library for Job DSL plugin scripts and shared Je…7.5
• CVE-2025-68703Jervis is a library for Job DSL plugin scripts and shared Je…7.5
• CVE-2025-68704Jervis is a library for Job DSL plugin scripts and shared Je…7.5
• CVE-2025-68705RustFS is a distributed object storage system built in Rust.…9.8
• CVE-2025-68706A stack-based buffer overflow exists in the GoAhead-Webs HTT…9.8