CVE-2026-58579 is a cross-site scripting vulnerability in infiniflow's RAGFlow product before version 0.26.3. The vulnerability arises because the agent update endpoint normalizes submitted DSL data only by JSON serialization validation, preserving the node name without sanitization. The dataflow-result web UI then inserts this node name into the DOM using dangerouslySetInnerHTML with i18next configured to disable escaping, resulting in unencoded HTML insertion. An authenticated user with permission to create or edit agents can exploit this to inject JavaScript that executes in other users' sessions when they open the dataflow result and click the rerun confirmation, enabling session/token theft and account takeover across user trust boundaries.

An authenticated user with agent creation or editing privileges can inject malicious JavaScript code that executes in the browsers of other workspace users. This can lead to theft of session tokens and account takeover, compromising user accounts and potentially the integrity of the workspace environment. The vulnerability requires user interaction (clicking rerun) and privileges to create or edit agents.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict agent creation and editing permissions to trusted users only and educate users to avoid clicking rerun on suspicious dataflow results. Monitor vendor communications for an official fix or update.