2026-11-04
Cross-tenant read exposure in InfiniFlow RAGFlow (through 0.27.2 and 1.0.0-rc2) lets an authenticated low-privilege user query knowledge bases that belong to other tenants through the Text-To-SQL Retrieval feature. Manipulating the tableName/kbIDs arguments passed to RunSQL in internal/engine/infinity/sql.go defeats the ownership check and returns retrieval data from knowledge bases outside the caller's tenant, with confidentiality-only impact and no integrity or availability effect. A public PoC reference exists (github.com/ZSH402/RAGFlow-Cross-Tenant-Read); it is not verified as working exploit code, there is no CISA KEV listing, and the priority decision is monitor - a genuine but low-urgency flaw whose real exposure is limited to multi-tenant deployments that have the retrieval feature reachable.
Authorization bypass in Sanluan PublicCMS 5's trade payment module lets an authenticated low-privileged user supply an arbitrary userId to TradePaymentService.pendingRefund and act on another user's refund records without any ownership check. Exposure is limited to deployments running a release before the 202608 series with the trade payment feature deployed and the web trade payment controller reachable, since that controller was removed in commit 7329437. VulDB reports a public proof-of-concept reference and the CVSS 4.0 vector carries E:P, but there is no confirmed active exploitation (not in CISA KEV) and the vendor-linked priority label is monitor.