CVE-2026-45312Disclosure

LOWCVSS 9.9 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In 0.24.0 and earlier, a Jinja2 template injection in the prompt generator (rag/prompts/generator.py) allows any authenticated user to execute arbitrary OS commands on the server. Any normal user can register, create a Canvas workflow with a DuckDuckGo + LLM component chain, and trigger the SSTI.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-1336

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-09-16); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Classification over time

Date	Total	Labels

2026-09-16	2	Disclosure2
2026-09-18	1	Disclosure1

Full discourse3 posts

Clint Quah@DaddyQuah46d
Disclosure
AI security isn't just about the model. The real attack surface includes the workflows, tools, APIs, credentials and runtime around it. RAGFlow shows why. CVE-2026-45312 and CVE-2026-28797 turned Jinja2 SSTI into remote code execution.
Post summary
The post announces CVE‑2026‑45312 and CVE‑2026‑28797, explaining that Jinja2 SSTI can lead to remote code execution, while offering no PoC, exploit tool, active exploitation, or patch guidance.
0002059
34 followersView on X
Six string shooter@one_blues_fan46d
Disclosure
AI security isn't just about the model. The real attack surface includes the workflows, tools, APIs, credentials and runtime around it. RAGFlow shows why. CVE-2026-45312 and CVE-2026-28797 turned Jinja2 SSTI into remote code execution.
Post summary
The tweet discloses two CVEs (CVE-2026-45312 and CVE-2026-28797) affecting RAGFlow, describing them as Jinja2 SSTI vulnerabilities leading to RCE, but provides no PoC, exploit, patch, or active exploitation information.
0001050
106 followersView on X
Six string shooter@one_blues_fan44d
Disclosure
1/ AI security isn't just about the model. The real attack surface includes the workflows, tools, APIs, credentials and runtime around it. 2/ RAGFlow shows why. CVE-2026-45312 and CVE-2026-28797 turned Jinja2 SSTI into remote code execution.
Post summary
The text discloses two CVEs (CVE-2026-45312 and CVE-2026-28797) that leverage Jinja2 Server-Side Template Injection to achieve remote code execution, illustrating a broader AI security attack surface.
0000044
103 followersView on X

Explore more

Back to dashboard