CVE-2026-58579 is a cross-site scripting vulnerability in infiniflow's RAGFlow product before version 0.26.3. The issue stems from the agent update endpoint normalizing submitted DSL data with JSON serialization validation but preserving the node name without sanitization. The dataflow-result web UI renders this node name using dangerouslySetInnerHTML combined with an i18next configuration that disables HTML escaping (escapeValue:false). This allows an authenticated workspace user who can create or edit agents to inject arbitrary JavaScript. When another workspace member views the dataflow result and clicks the 'Rerun from current step' confirmation modal, the injected script executes in their session context, enabling session or token theft and account takeover across user trust boundaries.

The vulnerability allows authenticated users with agent creation or editing privileges to inject malicious JavaScript code that executes in the browsers of other authenticated users. This can lead to session or token theft and potential account takeover. The attack requires user interaction (clicking the rerun confirmation), and the vulnerability affects confidentiality and integrity but not availability. The CVSS 3.1 base score is 5.4 (medium severity), reflecting network attack vector, low attack complexity, privileges required, user interaction, and partial impact on confidentiality and integrity.

No official fix or patch is currently documented. Users should upgrade to RAGFlow version 0.26.3 or later once available, as this version presumably addresses the issue. Until then, restrict agent creation and editing permissions to trusted users only to reduce risk. Monitor vendor advisories for an official patch or remediation guidance. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.