CVE-2026-51892 | Infiniflow RAGFlow 0.24.0 /v1/document/get access control

October 1, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Infiniflow RAGFlow 0.24.0. The affected element is an unknown function of the file /v1/document/get. The manipulation leads to improper access controls.

This vulnerability is uniquely identified as CVE-2026-51892. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More