CVE-2026-13509Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controllers/files.py of the component Knowledge File Handler. Such manipulation leads to path traversal. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-13509 A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controll… https://www.cve.org/CVERecord?id=CVE-2026-13509 ----- Traducción: CVE-2026-13509 Se … http://infoflow.cloud`
Post summary
A new CVE-2026-13509 affecting RAGapp up to version 0.1.5 has been announced, targeting the FileHandler.upload_file and remove_file functions. No exploit details or patches are provided.
0001037
89 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2026-13509 Path Traversal in RAGapp Knowledge File Handler Up to 0.1.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13509 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The text announces a path‑traversal vulnerability in RAGapp Knowledge File Handler (v 0.1.5), linking to additional details, but provides no PoC, exploit, patch, or evidence of active exploitation.
0001095
4.1K followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-13509 A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.upload_file/FileHandler.remove_file of the file src/ragapp/backend/controll… https://www.cve.org/CVERecord?id=CVE-2026-13509
Post summary
A vulnerability has been identified in RAGapp versions up to 0.1.5, affecting the FileHandler.upload_file and FileHandler.remove_file functions, with technical details linked to the official CVE record.
00000804
57.7K followersView on X

Explore more

Back to dashboard