Security Advisory

CVE-2026-51894

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-10-01 00:00:00

Last updated 2026-10-05 15:31:06

Assigner mitre

CVSS score 6.5

State PUBLISHED

Description

infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable path accepts a caller-selected object or tenant identifier and reaches a data-access operation without a visible owner, tenant, workspace, or membership binding on that object.

← Browse all CVEs View on cve.org ↗