Secuno
ENNL
Book demo

CVE-2025-69286

Infiniflow Ragflow vulnerability

9.8 CRITICALPublic exploitEPSS 0.80%
  1. Published31 Dec 2025

Description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process allows these tokens to be mutually derivable. Specifically, both tokens are generated using the same `URLSafeTimedSerializer` with predictable inputs, enabling an unauthorized user who obtains the shared assistant/agent URL to derive the personal API key. This grants them full control over the assistant/agent owner's account. Version 0.22.0 fixes the issue.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Infiniflow Ragflow< 0.22.0

Remediation

Fixed in
Infiniflow Ragflow≥ 0.22.0

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-854968.8
The Botslab G980H dash camera firmware generates session identifiers using a small…
CVE-2026-751069.1
OpnForm derives editable-submission secrets from sequential row identifiers using…
CVE-2026-135778.2
Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required…
CVE-2026-113749.0
In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and…
CVE-2026-97339.1
Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure…
CVE-2026-50819.1
Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session…

Frequently asked

Is CVE-2025-69286 being actively exploited?

CVE-2025-69286 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.80%.

How severe is CVE-2025-69286?

CVE-2025-69286 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 0.80% probability of exploitation.

Which products are affected by CVE-2025-69286?

Affected products include Infiniflow Ragflow.

How do I fix CVE-2025-69286?

Upgrade affected software to a fixed version, for example Infiniflow Ragflow 0.22.0 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-69286 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.