CVE-2025-69286 RAGFlow has Predictable Token Generation Leading to Authentication Bypass Vulnerability

High 8.9 Published 31 Dec 2025 Updated 2 Jan 2026

Attackers can derive API keys from shared URLs due to predictable token generation, leading to full account takeover in RAGFlow.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-69286?

CVE-2025-69286 is a high-severity authentication bypass vulnerability in infiniflow ragflow, published on 31 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation algorithm in the API key and beta (assistant/agent share auth) token generation process allows these tokens to be mutually derivable. Specifically, both tokens are generated using the same `URLSafeTimedSerializer` with predictable inputs, enabling an unauthorized user who obtains the shared assistant/agent URL to derive the personal API key. This grants them full control over the assistant/agent owner's account. Version 0.22.0 fixes the issue.

Weakness: CWE-340

Which versions are affected by CVE-2025-69286?

It affects 1 product.

Products include Infiniflow Ragflow.

How do I fix CVE-2025-69286?

No fix has been published for CVE-2025-69286 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-69286 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-69286 exists.

Public exploit code: 1 proofs of concept on GitHub.

Sources

Also known as GHSA-9j5g-g4xm-57w7.