Vulnerabilities > Infiniflow > Ragflow > 0.14.0

DATE CVE VULNERABILITY TITLE RISK
2025-02-25 CVE-2025-27135 SQL Injection vulnerability in Infiniflow Ragflow
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.
network
low complexity
infiniflow CWE-89
critical
9.8