SQL Injection in Infiniflow Ragflow
CVE-2025-27135
RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL injection. The ExeSQL component extracts the SQL statement from the input and sends it directly to the database query. A…
Vulnerability class: SQL Injection
EPSS: 0.006 (43.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Infiniflow Ragflow — versions <= 0.15.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Product, x_refsource_MISC)
- security-advisories@github.com (Exploit, x_refsource_MISC)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Exploit)
Frequently asked questions
- What is CVE-2025-27135?
- CVE-2025-27135 is a critical-severity vulnerability in Infiniflow Ragflow, classified under SQL Injection. CVSS score: 9.8/10. Published 2025-02-25.
- How severe is CVE-2025-27135?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2025-27135 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.