https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T00:49:39.224842+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-380956 EUVD-2026-380956 2026-10-09T00:49:39.275059+00:00 EUVD-2026-380956 https://cve.radiocsirt.org/vuln/fkie_cve-2026-51896 fkie_cve-2026-51896 2026-10-09T00:49:39.275101+00:00

infiniflow ragflow 0.25.3 contains improper access control in resume (api/apps/connector_app.py). Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations.

 https://cve.radiocsirt.org/vuln/ghsa-fjwv-9m73-7c4f GHSA-fjwv-9m73-7c4f 2026-10-09T00:49:39.275136+00:00

infiniflow ragflow 0.25.3 contains improper access control in resume (api/apps/connector_app.py). Depending on the exposed entry, an attacker can perform unauthorized cross-session or privilege-crossing operations.