CVE-2026-28797
Improper input validation in Infiniflow Ragflow
CVSS score
8.8
EPSS probability
%0.6
Risk score
0.0
Published
6 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
When AI infrastructure becomes the target: Securing gateways and control points
Microsoft Threat Intelligence examines attacks on exposed AI workloads, including LiteLLM gateway exploitation, credential harvesting, persistence, and cryptomining activity. The post When AI infrastructure becomes the target: Securing gateways and control points appeared first on Microsoft Security Blog.
Similar Vulnerabilities
9.8
CVE-2025-69286Vulnerability in Infiniflow Ragflow
Patch verified Public Exploits:1EPSS %1
8.8
CVE-2025-68700OS command injection in Infiniflow Ragflow
Patch verified Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-28797"