CVE-2026-51897 | RAGFlow 0.24.0 api/apps/evaluation_app get_dataset access control

October 1, 2026 Yanac

A vulnerability, which was classified as critical, was found in RAGFlow 0.24.0. The impacted element is the function get_dataset of the file api/apps/evaluation_app. The manipulation results in improper access controls.

This vulnerability was named CVE-2026-51897. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More