What is the CVSS score of CVE-2026-24770?

CVE-2026-24770 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.9%.

Which versions of AI / ML are affected by CVE-2026-24770?

A critical vulnerability (CVSS 9.8) in RAGFlow poses an immediate threat to organizations using this open-source RAG engine, with a 90% likelihood of active exploitation.. A patch is available.

Is there a public PoC exploit available for CVE-2026-24770?

Yes, a public proof-of-concept exploit is available for CVE-2026-24770. Prioritise patching immediately. EPSS: 0.9%.

How to fix or mitigate CVE-2026-24770?

Within 24 hours: Identify all instances of RAGFlow in production and development environments; assess data sensitivity and exposure risk. Within 7 days: Apply the available vendor patch to all RAGFlow deployments and validate functionality in staging before production rollout. Within 30 days: Conduct a security audit of patched systems, review access logs for signs of compromise, and implement continuous vulnerability scanning to detect similar issues.

AI / ML CVE-2026-24770

CRITICAL

Path Traversal (CWE-22)

2026-01-27 security-advisories@github.com

RCE AI / ML Ragflow

9.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Jan 30, 2026 - 21:53 vuln.today

Public exploit code

Patch released

Jan 30, 2026 - 21:53 nvd

Patch available

CVE Published

Jan 27, 2026 - 22:15 nvd

CRITICAL 9.8

DescriptionGitHub Advisory

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser contains a "Zip Slip" vulnerability, allowing an attacker to overwrite arbitrary files on the server (leading to Remote Code Execution) via a malicious ZIP archive. The MinerUParser class retrieves and extracts ZIP files from an external source (mineru_server_url). The extraction logic in _extract_zip_no_root fails to sanitize filenames within the ZIP archive. Commit 64c75d558e4a17a4a48953b4c201526431d8338f contains a patch for the issue.

AnalysisAI

Path traversal vulnerability in RAGFlow RAG engine version 0.23.1 allows unauthenticated attackers to read arbitrary files from the server filesystem. PoC available, patch available.

Technical ContextAI

CWE-22 in RAGFlow 0.23.1. Insufficient path sanitization allows directory traversal sequences to escape the intended file access scope, enabling arbitrary file reads from the server.