P4Verified

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/.

CVE-2026-51892. CVSS base score 6.5 (MEDIUM, Source advisory). EPSS 0.00154 (percentile 0.03963), scored 2026-10-04.

Published 2026-10-05 23:10:35.361225+00:00

CVE: CVE-2026-51892
CWE: CWE-284
CCR priority: 26.0 /100 (P4)
CVSS: 6.5 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · Source advisory
EPSS: 0.00154 · percentile 0.03963 · 2026-10-04
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-05 23:09:08.830529+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC