CVE-2025-68700 - RAGFlow Remote Code Execution Vulnerability

CVE ID : CVE-2025-68700 Published : Dec. 31, 2025, 10:15 p.m. | 59 minutes ago Description : RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged authenticated user (normal login account) can execute arbitrary system commands on the server host process via the frontend Canvas CodeExec component, completely bypassing sandbox isolation. This occurs because untrusted data (stdout) is parsed using eval() with no filtering or sandboxing. The intended design was to

Source: Telegram CVE Monitor