CVE-2026-58579
Last modified
CVE-2026-58579 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize_dsl, which only performs JSON serialization validation and preserves the node name verbatim. The dataflow-result web UI then renders that name into the "Rerun from current step" confirmation modal via dangerouslySetInnerHTML, and the i18next configuration sets escapeValue:false, so the value is inserted into the DOM without HTML encoding. EPSS estimates a 0.18% chance of exploitation in the next 30 days.
Description
RAGFlow before 0.26.3 stores an agent pipeline (DSL) node name without sanitization: the agent update endpoint normalizes the submitted DSL via normalize_dsl, which only performs JSON serialization validation and preserves the node name verbatim. The dataflow-result web UI then renders that name into the "Rerun from current step" confirmation modal via dangerouslySetInnerHTML, and the i18next configuration sets escapeValue:false, so the value is inserted into the DOM without HTML encoding. An authenticated workspace user who can create or edit an agent can inject arbitrary JavaScript that executes in the session of another workspace member who opens the dataflow result and clicks rerun, enabling session/token theft and account takeover across the user trust boundary.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| infiniflow | ragflow | < 0.26.3 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-58579?
How severe is CVE-2026-58579?
How do I fix CVE-2026-58579?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-58557Design defect vulnerability in Expedition mode. Impact: Succ…4.8
- CVE-2026-58558Permission control vulnerability in the file system. Impact:…7.8
- CVE-2026-58559DoS vulnerability in the vibration service. Impact: Successf…6.5
- CVE-2026-5856Contiki-NG's DNS/mDNS resolver skip_name() in os/services/re…7.1
- CVE-2026-5857Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-…9.2
- CVE-2026-58578LobeChat before version 2.2.10-canary.15 contains a regular …7.1
- CVE-2026-5858Heap buffer overflow in WebML in Google Chrome prior to 147.…8.8
- CVE-2026-58580LobeChat through 2.2.9 server-database deployments are vulne…6
- CVE-2026-58583FluxInk (formerly Sunia SPB Peripheral) Color Management Dri…8.4
- CVE-2026-58586Image::WebP versions before 0.3.0 for Perl bundle a vulnerab…9.8
- CVE-2026-58587Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2026-58588Improper Neutralization of Input During Web Page Generation …6.1
Are you affected by CVE-2026-58579?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST