CVE-2026-24770

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser contains a "Zip Slip" vulnerability, allowing an attacker to overwrite arbitrary files on the server (leading to Remote Code Execution) via a malicious ZIP archive. The MinerUParser class retrieves and extracts ZIP files from an external source (mineru_server_url). The extraction logic in `_extract_zip_no_root` fails to sanitize filenames within the ZIP archive. Commit 64c75d558e4a17a4a48953b4c201526431d8338f contains a patch for the issue.

• CWE-22

• https://github.com/infiniflow/ragflow/commit/64c75d558e4a17a4a48953b4c201526431d8338fPatch
• https://github.com/infiniflow/ragflow/security/advisories/GHSA-v7cf-w7gj-pgf4Exploit, Vendor Advisory

Published

Jan 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-24764OpenClaw (formerly Clawdbot) is a personal AI assistant user…3.7
• CVE-2026-24765PHPUnit is a testing framework for PHP. A vulnerability has …7.8
• CVE-2026-24766NocoDB is software for building databases as spreadsheets. P…4.9
• CVE-2026-24767NocoDB is software for building databases as spreadsheets. P…6.4
• CVE-2026-24768NocoDB is software for building databases as spreadsheets. P…6.1
• CVE-2026-24769NocoDB is software for building databases as spreadsheets. P…9
• CVE-2026-24771Hono is a Web application framework that provides support fo…4.7
• CVE-2026-24772OpenProject is an open-source, web-based project management …9
• CVE-2026-24773The Open eClass platform (formerly known as GUnet eClass) is…7.5
• CVE-2026-24774The Open eClass platform (formerly known as GUnet eClass) is…4.3
• CVE-2026-24775OpenProject is an open-source, web-based project management …7.3
• CVE-2026-24776OpenProject is an open-source, web-based project management …4.3