CVE-2026-45312: RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated...

Added to the CISA Known Exploited Vulnerabilities catalog on 29 May 2026. Vendor: AI/ML. Product: LLM. CVSS score: 9.9.

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated user to execute arbitrary OS commands on the server. Any normal user can register, create a Canvas ...

Required action: Review and patch if applicable to your AI infrastructure.