CVE-2026-24770

This vulnerability is like letting an attacker send a “package” that pretends to contain harmless files, but when the server unpacks it, the files are written to the wrong (more dangerous) places. Once the attacker can overwrite those files, they can cause the server to run attacker-supplied commands. For a business, that can mean stolen data, downtime, or your server being used for further attacks.

This matters to you if you use or host RAGFlow version 0.23.1 or earlier. It’s especially important if your setup allows the application to retrieve MinerU ZIP content from an external URL that an attacker can influence or control.

It’s only a risk when that external ZIP source/URL is reachable from the network path the attacker controls (precondition includes mineru_server_url being accessible by the attacker), and you’re running an affected RAGFlow version.

This is RED because attackers have been reported targeting systems in the wild (Qilin activity), and the bug enables direct remote code execution without authentication or user interaction. The attack is network-based and does not require a logged-in user—an attacker only needs reachability to your server and access to the external ZIP source behavior described in the preconditions.