CVE-2026-61736 LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests
Default CORS settings allow any website to make authenticated requests, enabling attackers to steal data or delete documents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-61736?
CVE-2026-61736 is a critical vulnerability in HKUDS LightRAG, published on 15 Jul 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.4, the server defaults to CORS_ORIGINS=* combined with allow_credentials=True in lightrag/api/lightrag_server.py, causing Starlette CORSMiddleware to effectively whitelist every origin for credentialed cross-origin requests. Any malicious website visited by an authenticated LightRAG user can silently make authenticated API requests, exfiltrating documents and knowledge graph data or performing destructive actions such as deleting the document store. This vulnerability is fixed in 1.5.4.
Weakness: CWE-942
Which versions are affected by CVE-2026-61736?
3 open source packages ship an affected version, including lightrag-hku.
| Package | Affected | Fixed in |
|---|---|---|
lightrag-hku PyPI | All versions | 1.5.4 |
lightrag-hku PyPI | All versions | 1.5.4 |
lightrag-hku PyPI | All versions | 1.5.4 |
How do I fix CVE-2026-61736?
Upgrade lightrag-hku to 1.5.4 or later.
Is CVE-2026-61736 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-61736 exists.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-6x6h-qqr7-855w, PYSEC-2026-3474.