CVE-2026-51896 is a medium severity vulnerability in infiniflow ragflow version 0.25.3. It involves improper access control in the resume functionality within the connector_app.py file. This flaw can allow an attacker with some privileges to perform unauthorized cross-session or privilege-crossing operations, potentially impacting the integrity of the system.
Ragflow versions 0.24.0 and earlier have an improper access control vulnerability in the update_metadata_setting function within api/apps/kb_app.py. This flaw allows attackers to perform unauthorized cross-session or privilege-crossing operations depending on the exposed entry. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
Infiniflow ragflow version 0.24.0 contains an incorrect access control vulnerability in the run_mindmap function. This flaw allows a caller to specify an object or tenant identifier that is used in a data-access operation without proper ownership, tenant, workspace, or membership verification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.
Infiniflow ragflow version 0.24.0 contains an incorrect access control vulnerability in the trace_mindmap feature. This flaw allows an external caller to specify an object or tenant identifier and access data without proper ownership, tenant, workspace, or membership verification. The vulnerability has a critical severity with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
Infiniflow ragflow version 0.24.0 contains an incorrect access control vulnerability in the /v1/document/get/<doc_id> endpoint. This flaw allows users with limited privileges to access documents they should not be authorized to view. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact primarily affecting confidentiality. No official patch or remediation information is currently available.
langflow-ai langflow version 1.8.4 and earlier contains a directory traversal vulnerability in the knowledge base creation HTTP endpoint. This flaw allows an attacker to write or overwrite files outside the intended workspace by supplying absolute file paths. The vulnerability arises from insufficient boundary enforcement on user-controlled input in the HTTP POST handler for creating knowledge bases.
Langflow-ai langflow version 1.9.3 and earlier contains a critical code injection vulnerability. An authenticated attacker can submit arbitrary Python code to the /api/v1/validate/code endpoint, which is executed on the server without sandboxing or security controls. This allows remote code execution with full impact on confidentiality, integrity, and availability.
Langchain Chatchat version 0.3.1 contains a critical path traversal vulnerability in its /knowledge_base/upload_temp_docs endpoint. This flaw allows attackers to craft malicious filenames to write files outside the intended temporary directory, potentially overwriting arbitrary files on the server. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
Langchain-Chatchat versions 0.3.0 and 0.3.1 contain a path traversal vulnerability in the knowledge base creation and document upload interfaces. This flaw allows an attacker to use path traversal sequences in the knowledge_base_name parameter to write files outside the intended directory. The vulnerability has a high severity with a CVSS score of 9.1, indicating critical impact on confidentiality and integrity without requiring privileges or user interaction.
Langchain-Chatchat version 0.3.0 contains a path traversal vulnerability in its OpenAI-compatible file upload endpoint `/v1/files`. This flaw allows attackers to write files outside the intended `openai_files` directory by using crafted filenames. The vulnerability is critical with a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring privileges or user interaction.
deeptutor version 1.4.0 contains a critical code injection vulnerability in the ExecTool.execute function. This flaw allows a remote attacker to execute arbitrary shell commands on the service environment via the live tutorbot WebSocket interface without any authentication or user interaction.
deeptutor version 1.4.0 has a critical path traversal vulnerability in the EditFileTool.execute function. This flaw allows a remote attacker to write or modify files at arbitrary absolute paths outside the intended bot workspace via the live tutorbot WebSocket interface. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
deeptutor version 1.4.0 contains a critical authorization bypass vulnerability in the TutorBotManager.write_bot_file function. This flaw allows a remote attacker to enumerate bot IDs and overwrite whitelisted control files of other bots via the HTTP tutorbot file route. The vulnerability enables unauthorized modification of sensitive files without authentication.
deeptutor version 1.4.0 has an authorization bypass vulnerability in the TurnRuntimeManager.regenerate_last_turn function. This flaw allows a remote attacker with limited privileges to enumerate or obtain another user's session_id and invoke the regenerate function on that session. The vulnerability does not impact confidentiality or availability but can lead to unauthorized modification of session state.
Multiple security issues were addressed in the jupyter-jupyterlab-4.5.11-1.1 package distributed by SUSE for openSUSE Tumbleweed. These fixes improve the security posture of the JupyterLab environment. No specific vulnerability details or affected versions are provided.
A vulnerability in the PlatformIntegration component of Google Chrome on Windows prior to version 154.0.8037.57 allows a remote attacker to bypass system access restrictions via a crafted HTML page using social engineering. The issue has a medium severity rating with a CVSS score of 6.5 and impacts integrity without affecting confidentiality or availability.
A vulnerability in the Bluetooth component of Google Chrome prior to version 154.0.8037.57 allows a remote attacker to bypass system access restrictions by leveraging social engineering through a crafted HTML page. The issue is due to incomplete cleanup in Bluetooth handling. The vulnerability has a high severity rating with a CVSS score of 8.4.
A missing authorization vulnerability in WebView within Google Chrome on Android versions prior to 154.0.8037.57 allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.4. No explicit patch information is provided, so patch status is not confirmed.
A missing authorization vulnerability in the WakeLock component of Google Chrome prior to version 154.0.8037.57 allows a remote attacker who has compromised the renderer process to bypass system access restrictions using a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.4.